Supported TLVs in LLDP
LLDPDUs include mandatory and optional TLVs. The following table lists the mandatory TLVs that the firewall supports:
Chassis ID TLV
Identifies the firewall chassis. Each firewall must have exactly one unique Chassis ID. The Chassis ID subtype is 4 (MAC address) on Palo Alto Networks models will use the MAC address of Eth0 to ensure uniqueness.
Port ID TLV
Identifies the port from which the LLDPDU is sent. Each firewall uses one Port ID for each LLDPDU message transmitted. The Port ID subtype is 5 (interface name) and uniquely identifies the transmitting port. The firewall uses the interface’s ifname as the Port ID.
Time-to-live (TTL) TLV
Specifies how long (in seconds) LLDPDU information received from the peer is retained as valid in the local firewall (range is 0-65,535). The value is a multiple of the LLDP Hold Time Multiplier. When the TTL value is 0, the information associated with the device is no longer valid and the firewall removes that entry from the MIB.
End of LLDPDU TLV
Indicates the end of the TLVs in the LLDP Ethernet frame.
The following table lists the optional TLVs that the Palo Alto Networks firewall supports:
Purpose and Notes Regarding Firewall Implementation
Port Description TLV
Describes the port of the firewall in alpha-numeric format. The ifAlias object is used.
System Name TLV
Configured name of the firewall in alpha-numeric format. The sysName object is used.
System Description TLV
Describes the firewall in alpha-numeric format. The sysDescr object is used.
Describes the deployment mode of the interface, as follows:
One or more IP addresses used for firewall management, as follows:
If no management IP address is provided, the default is the MAC address of the transmitting interface.
Included is the interface number of the management address specified. Also included is the OID of the hardware interface with the management address specified (if applicable).
If more than one management address is specified, they will be sent in the order they are specified, starting at the top of the list. A maximum of four Management Addresses are supported.
This is an optional parameter and can be left disabled.