Skip to main content

Existing Configuration

You can use existing object, already configured on FMC and define them in data/*.yaml folder, under existing key.

Every object defined under existing key, will be created as data.source and cannot be modified.

Note: The file is build using objects from schema.

Diagram

Classes

existing

NameTypeConstraintMandatoryDefault Value
fmcClass[fmc]No

fmc (existing)

NameTypeConstraintMandatoryDefault Value
domainsList[domains]No
smart_licenseStringmax: 255No
nameStringNo

domains (existing.fmc)

NameTypeConstraintMandatoryDefault Value
nameStringYes
devicesClass[devices]No
objectsClass[objects]No
policiesClass[policies]No

devices (existing.fmc.domains)

NameTypeConstraintMandatoryDefault Value
devicesList[devices]No
clustersList[clusters]No
ha_pairsList[ha_pairs]No

objects (existing.fmc.domains)

NameTypeConstraintMandatoryDefault Value
hostsList[hosts]No
networksList[networks]No
rangesList[ranges]No
network_groupsList[network_groups]No
urlsList[urls]No
url_groupsList[url_groups]No
portsList[ports]No
icmp_v4sList[icmp_v4s]No
port_groupsList[port_groups]No
fqdnsList[fqdns]No
fqdn_groupsList[fqdn_groups]No
dynamic_objectsList[dynamic_objects]No
sgtsList[sgts]No
security_zonesList[security_zones]No
standard_aclsList[standard_acls]No
extended_aclsList[extended_acls]No
variable_setsList[variable_sets]No
bfd_templatesList[bfd_templates]No
file_typesList[file_types]No
file_categoriesList[file_categories]No

policies (existing.fmc.domains)

NameTypeConstraintMandatoryDefault Value
alertsList[alerts]No
access_policiesList[access_policies]No
ftd_nat_policiesList[ftd_nat_policies]No
intrusion_policiesList[intrusion_policies]No
file_policiesList[file_policies]No
prefilter_policiesList[prefilter_policies]No
network_analysis_policiesList[network_analysis_policies]No

devices (existing.fmc.domains.devices)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+ -]{1,64}$Yes
vrfsList[vrfs]No
bfdsList[bfds]No
bgp_general_settingsList[bgp_general_settings]No

clusters (existing.fmc.domains.devices)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+ -]{1,64}$Yes

ha_pairs (existing.fmc.domains.devices)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+ -]{1,64}$Yes

hosts (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

networks (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

ranges (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

network_groups (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringmatches: ^[A-Za-z0-9-_\.]+$Yes

urls (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

url_groups (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

ports (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

icmp_v4s (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringmax: 30Yes

port_groups (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

fqdns (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

fqdn_groups (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

dynamic_objects (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

sgts (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

security_zones (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

standard_acls (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

extended_acls (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

variable_sets (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

bfd_templates (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

file_types (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringYes

file_categories (existing.fmc.domains.objects)

NameTypeConstraintMandatoryDefault Value
nameStringYes

alerts (existing.fmc.domains.policies)

NameTypeConstraintMandatoryDefault Value
syslogsList[syslogs]No
snmpsList[snmps]No

access_policies (existing.fmc.domains.policies)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_ -]{1,64}$Yes

ftd_nat_policies (existing.fmc.domains.policies)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_ -]{1,64}$Yes

intrusion_policies (existing.fmc.domains.policies)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+ -]{1,64}$Yes

file_policies (existing.fmc.domains.policies)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+ -]{1,64}$Yes

prefilter_policies (existing.fmc.domains.policies)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+ -]{1,64}$Yes

network_analysis_policies (existing.fmc.domains.policies)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+ -]{1,64}$Yes

vrfs (existing.fmc.domains.devices.devices)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+ -]{1,64}$Yes
ipv4_static_routesList[ipv4_static_routes]No
physical_interfacesList[physical_interfaces]No
etherchannel_interfacesList[etherchannel_interfaces]No
sub_interfacesList[sub_interfaces]No

bfds (existing.fmc.domains.devices.devices)

NameTypeConstraintMandatoryDefault Value
interface_logical_nameStringYes

bgp_general_settings (existing.fmc.domains.devices.devices)

NameTypeConstraintMandatoryDefault Value
as_numberStringRegex: ^[a-zA-Z0-9_.+ -]{1,64}$Yes

syslogs (existing.fmc.domains.policies.alerts)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+ -]{1,64}$Yes

snmps (existing.fmc.domains.policies.alerts)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+ -]{1,64}$Yes

ipv4_static_routes (existing.fmc.domains.devices.devices.vrfs)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$No

physical_interfaces (existing.fmc.domains.devices.devices.vrfs)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

etherchannel_interfaces (existing.fmc.domains.devices.devices.vrfs)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

sub_interfaces (existing.fmc.domains.devices.devices.vrfs)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.+-]{1,64}$Yes

Example of the file:

existing:
fmc:
domains:
- name: Global
policies:
intrusion_policies:
- name: Balanced Security and Connectivity
objects:
networks:
- name: any-ipv4
ports:
- name: HTTP