>
    Strata Copilot
    Supported TLVs in LLDP
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. LLDP
    4. Supported TLVs in LLDP
    Download PDF
    Next-Generation Firewall

    Supported TLVs in LLDP

    Table of Contents

    Supported TLVs in LLDP

    Understand the mandatory and optional Type-Length-Value elements that LLDP supports.
    Where Can I Use This?What Do I Need?
    • NGFW (Managed by PAN-OS or Panorama)
    LLDPDUs include mandatory and optional TLVs (Type-Length-Value elements). The following table lists the mandatory TLVs that the firewall supports:
    Mandatory TLVs
    TLV Type
    Description
    Chassis ID TLV
    1
    Identifies the firewall chassis. Each firewall must have exactly one unique Chassis ID. The Chassis ID subtype is 4 (MAC address) on Palo Alto Networks® models will use the MAC address of Eth0 to ensure uniqueness.
    Port ID TLV
    2
    Identifies the port from which the LLDPDU is sent. Each firewall uses one Port ID for each LLDPDU message transmitted. The Port ID subtype is 5 (interface name) and uniquely identifies the transmitting port. The firewall uses the interface’s ifname as the Port ID.
    Time-to-live (TTL) TLV
    3
    Specifies how long (in seconds) LLDPDU information received from the peer is retained as valid in the local firewall (range is 0-65,535). The value is a multiple of the LLDP Hold Time Multiplier. When the TTL value is 0, the information associated with the device is no longer valid and the firewall removes that entry from the MIB.
    End of LLDPDU TLV
    0
    Indicates the end of the TLVs in the LLDP Ethernet frame.
    The following table lists the optional TLVs that the Palo Alto Networks firewall supports:
    Optional TLVs
    TLV Type
    Purpose and Notes Regarding Firewall Implementation
    Port Description TLV
    4
    Describes the port of the firewall in alpha-numeric format. The ifAlias object is used.
    System Name TLV
    5
    Configured name of the firewall in alpha-numeric format. The sysName object is used.
    System Description TLV
    6
    Describes the firewall in alpha-numeric format. The sysDescr object is used.
    System Capabilities
    7
    Describes the deployment mode of the interface, as follows:
    • An L3 interface is advertised with router (bit 6) capability and the “other” bit (bit 1).
    • An L2 interface is advertised with MAC Bridge (bit 3) capability and the “other” bit (bit 1).
    • A virtual wire interface is advertised with Repeater (bit 2) capability and the “other” bit (bit 1).
    Management Address
    8
    One or more IP addresses used for firewall management, as follows:
    • IP address of the management (MGT) interface
    • IPv4 and/or IPv6 address of the interface
    • Loopback address
    • User-defined address entered in the management address field
    If no management IP address is provided, the default is the MAC address of the transmitting interface.
    Included is the interface number of the management address specified. Also included is the OID of the hardware interface with the management address specified (if applicable).
    If more than one management address is specified, they will be sent in the order they are specified, starting at the top of the list. A maximum of four Management Addresses are supported.
    This is an optional parameter and can be left disabled.

    © 2025 Palo Alto Networks, Inc. All rights reserved.