>
    Strata Copilot
    config interface
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Use CLI Commands
    4. Config Commands
    5. config interface
    Download PDF
    Prisma SD-WAN

    config interface

    Table of Contents

    config interface

    Use the config interface command to configure a physical or a logical interface and consists of sub-commands—create a point to point protocol over ethernet (PPPoE) interface on a parent physical interface, update PPPoE interface details, configure the LLDP state of a selected interface, configure or enable the PoE threshold of a selected interface.
    PPPoE option is only available for preclaimed or unclaimed devices. Also, delete all parent configuration to view PPPoE options.

    Command

    config interface interface-number (pppoe | ip | ip6 | mode | mtu | usedfor= (none | private | public | private-l2) | enabled = (false | true))
    config interface (cellular1 | cellular2) (apn (auto-apn | name) | iptype (ipv4 | ipv6 | ipv4v6)| mtu | enabled= (false | true))
    config interface interface-number ipv6 (autoconf | static address= | pppoe | none)
    config interface <id> lldp state=(rxonly or txrx)
    config interface <id> poe enabled=true-usage-threshold 60

    Options

    pppoedescriptionEnter a description for the PPPoE interface.
    pppoeuserEnter the challenge handshake authentication protocol (CHAP) or password authentication protocol (PAP) user name for PPPoE authentication.
    pppoepasswdEnter the CHAP or PAP password for PPPoE authentication.
    servicenameEnter the name of the PPPoE service provider for connection. A WAN network has multiple service providers and select the service name field.
    addressEnter the IP address of the remote shim.
    gwEnter the IP address of the Gateway.
    reconnectdelayEnter a value for delay (in seconds) for PPPoE reconnection.
    hostuniqEnter an even-sized hexadecimal number to set a value for Host-Uniq.
    ipstatic gw - Enter the IP address for the gateway.
    dns - Enter the DNS address.
    address - Enter the static IP address of the interface.
    dhcphostname - Enter a single hostname or comma separated multiple hostnames.
    clientid - Enter the DHCP client identity.
    pppoeSelect pppoe to configure a PPPoE interface.
    noneEnter none to reset previously entered information.
    ipv6static gw - Enter the IP address for the gateway.
    dns - Enter the DNS address.
    address - Enter the static IP address of the interface.
    autoconf
    Indicates the Global IP address is derived using stateless address autoconfiguration (SLAAC). Release 6.2.1
    pppoeSelect pppoe to configure a PPPoE interface. Release 6.2.1
    noneEnter none to reset previously entered information. Release 6.2.1
    modeautoSelect auto for automatic negotiation.
    speedSelect speed as 10, 100 or 1000 MBPS.
    duplexSelect duplex for duplex negotiation.
    mtuEnter a number between 552-1500. The default value is 1500.
    usedfornoneEnter none when interface is used as a controller port (just for connecting to controller).
    privateEnter private to configure the interface for a private WAN.
    publicEnter public to configure the interface for a public network.
    private-l2Enter private-l2 to configure an L2 interface as part of a bypass pair.
    enabledtrueEnter true to enable the interface.
    falseEnter false to disable the interface.
    Cellular Interfaces
    apnauto-apnWhen you select auto-apn, default carrier APN is automatically detected and the device connects using auto-APN profile.
    name=Enter the name of the APN profile. Optional parameters are auth-type (pap, chap, pap/chap), username, and password.
    iptypeipv4/ipv6/ipv4v6Configure cellular iptype options IPv4 / IPv4v6 on the cellular interface. In case of IPv4v6, devices can run IPv4 and IPv6 in parallel.Release 6.1.1
    mtuMTU number must be between 552-1428 for IPv4 and 1280-1428 for IPv6. The default value is 1428.
    enabled=false Enter false to disable the cellular interface.
    trueEnter true to enable the cellular interface.
    lldp stateAll non-PoE ports are set to receive-only mode and PoE ports are set to transmit and receive mode.
    rxonly LLDP packets in receive only mode.
    txrxLLDP packets in transmit and receive mode.
    poeConfigure PoE ports.
    enabled=Enter true to enable or false to disable the PoE port.
    usage thresholdEnter a usage threshold percentage.

    Command Notes

    RoleSuper
    Related Commands
    dump interface config
    Introduced inRelease 4.5.1

    Example

    config interface controller1 ip dhcp
				config interface 3 pppoe pppoeuser=root pppoepasswd=pass
				config interface 2 ip static address=10.10.10.252/24 gw=10.10.10.1 dns=9.9.9.9
    config interface cellular1 apn name=test auth-type=pap username=test1 password=test2
    config interface cellular1 iptype version=ipv4 
    config interface cellular1 iptype version=ipv6
    config interface cellular1 iptype version=ipv4v6
    config interface 5 ipv6 static address=2001:10:3:5::100/64 gw=2001:10:3:5::1 dns=2001:4860:4860::8888

    © 2026 Palo Alto Networks, Inc. All rights reserved.