Sub-Interface

Location in GUI: Devices » Device Management » Device » Interfaces

Diagram

Classes

vrfs (fmc.domains.devices.devices)

Name	Type	Constraint	Mandatory	Default Value
sub_interfaces	List	`[sub_interfaces]`	No

sub_interfaces (fmc.domains.devices.devices.vrfs)

Name	Type	Constraint	Mandatory	Default Value
name	String	max: `255`	Yes
mode	Choice	`INLINE`, `PASSIVE`, `TAP`, `ERSPAN`, `NONE`, `SWITCHPORT`	No	`NONE`
active_mac_address	String	max: `17`	No
allow_full_fragment_reassembly	Boolean	`true`, `false`	No
arp_table_entries	List	`[arp_table_entries]`	No
description	String	max: `255`	No
anti_spoofing	Boolean	`true`, `false`	No
sgt_propagate	Boolean	`true`, `false`	No	`false`
enabled	Boolean	`true`, `false`	No
ip_based_monitoring	Boolean	`true`, `false`	No
ip_based_monitoring_next_hop	IP		No
ip_based_monitoring_type	Choice	`AUTO`, `PEER_IPV4`, `PEER_IPV6`, `AUTO4`, `AUTO6`	No
ipv4_dhcp_obtain_default_route	Boolean	`true`, `false`	No
ipv4_dhcp_default_route_metric	Integer	min: `1`, max: `255`	No
ipv4_pppoe_authentication	Choice	`PAP`, `CHAP`, `MSCHAP`	No
ipv4_pppoe_password	String		No
ipv4_pppoe_route_metric	Integer	min: `1`, max: `255`	No
ipv4_pppoe_route_settings	Boolean	`true`, `false`	No
ipv4_pppoe_store_credentials_in_flash	Boolean	`true`, `false`	No
ipv4_pppoe_user	String		No
ipv4_pppoe_vpdn_group_name	String		No
ipv4_static_address	IP		No
ipv4_static_netmask	Integer	min: `1`, max: `31`	No
ipv6_addresses	List	`[ipv6_addresses]`	No
ipv6_dad_attempts	Integer	min: `0`, max: `600`	No
ipv6_dhcp_obtain_default_route	Boolean	`true`, `false`	No
ipv6_dhcp	Boolean	`true`, `false`	No
ipv6_dhcp_client_pd_hint_prefixes	String		No
ipv6_dhcp_client_pd_prefix_name	String		No
ipv6	Boolean	`true`, `false`	No
ipv6_auto_config	Boolean	`true`, `false`	No
ipv6_dad	Boolean	`true`, `false`	No
ipv6_dhcp_address_config	Boolean	`true`, `false`	No
ipv6_dhcp_nonaddress_config	Boolean	`true`, `false`	No
ipv6_ra	Boolean	`true`, `false`	No
ipv6_enforce_eui	Boolean	`true`, `false`	No
ipv6_link_local_address	String		No
ipv6_ns_interval	Integer	min: `1000`, max: `3600000`	No
ipv6_prefixes	List	`[ipv6_prefixes]`	No
ipv6_ra_interval	Integer	min: `3`, max: `1800`	No
ipv6_ra_life_time	Integer	min: `0`, max: `9000`	No
ipv6_reachable_time	Integer	min: `1000`, max: `3600000`	No
logical_name	String	Regex: `^[a-zA-Z0-9_.+-]{1,64}$`	No
management_only	Boolean	`true`, `false`	No
mtu	Integer	min: `64`, max: `9000`	No	`1500`
override_default_fragment_setting_chain	Integer	min: `1`, max: `8200`	No
override_default_fragment_setting_size	Integer	min: `1`, max: `30000`	No
override_default_fragment_setting_timeout	Integer	min: `1`, max: `30`	No
priority	Integer	min: `0`, max: `65535`	No	0
security_zone	String		No
standby_mac_address	String		No
vlan	Integer	min: `1`, max: `4094`	Yes

arp_table_entries (fmc.domains.devices.devices.vrfs.sub_interfaces)

Name	Type	Constraint	Mandatory	Default Value
enabled	Boolean	`true`, `false`	Yes	`true`
ip_address	IP		Yes
mac_address	String	max: `17`	Yes

ipv6_addresses (fmc.domains.devices.devices.vrfs.sub_interfaces)

Name	Type	Constraint	Mandatory
address	String		Yes
enforce_eui	Boolean	`true`, `false`	No
prefix	String		Yes

ipv6_prefixes (fmc.domains.devices.devices.vrfs.sub_interfaces)

Name	Type	Constraint	Mandatory	Default Value
address	String		Yes
default	Boolean	`true`, `false`	Yes

Examples

Prerequisites:

fmc:
  domains:
    - name: Global
      policies:
        access_control_policies:
          - name: MyAccessPolicyName2
            default_action: BLOCK
      objects:
        security_zones:
          - name: MySecurityZoneName1
      devices:
        devices:
          - name: MyDeviceName1
            host: 10.1.120.203
            access_control_policy: MyAccessPolicyName2
            registration_key: cisco123
            deploy: true
            licenses:
            - ESSENTIALS
            - IPS
            performance_tier: FTDv5
            vrfs:
              - name: Global
                physical_interfaces:
                  - name: GigabitEthernet0/2

Sub-Interface:

fmc:
  domains:
    - name: Global
      devices:
        devices:
          - name: MyDeviceName1
            vrfs:
              - name: Global
                sub_interfaces:
                  - name: GigabitEthernet0/2.100
                    ipv4_static_address: 10.0.0.1
                    ipv4_static_netmask: 24
                    logical_name: VLAN_100
                    mode: NONE
                    security_zone: MySecurityZoneName1
                    vlan: 100