Interface does not show up under zone configuration in Strata Cloud Manager

Interface does not show up under zone configuration in Strata Cloud Manager

325
Created On 11/18/24 19:33 PM - Last Modified 12/23/25 03:53 AM


Symptom


  • Unable to add interface to the zone and logical router in Strata Cloud Manager
  • GUI: Manage > Configurations >NGFW and Prisma Access >Device Settings >Zones

no-interface-under-Router.png

  • or GUI: Manage >Configurations >NGFW and Prisma Access >Device Settings >Router

no-interface-under-Router.png

 



Environment


  • Strata Cloud Manager (SCM)
  • Supported PAN-OS
  • NGFW or Prisma Access firewalls


Cause


  • Interfaces are not directly referable in zones or Logical Routers (LR). 
  • They must be resolved to a variable first and the variable must be referred in zones.
  • Variable created on 'All Firewalls level' or parent folder to the device folder does show up in zone/LR completions as expected. 


Resolution


  1. Create the Interface variable under folder and snippet.
  2. For details, Refer to the Strata Cloud Manager admin guide Configure a Layer 3 Interface: 
  3. The following steps documented in the above guide will help.
  4. Refer Step2: ( If you select a folder or select a snippet, you create a Layer 3 interface variable that must be assigned at the device level ).
  5. Refer to Step4-6Folders and Snippets only; Optional):  Assign the interface to a Logical Router ).
  6. Refer to Step4-7 ( Folders and Snippets only; Recommended) Assign the interface to a Zone ).

Note: One can  configure the interface directly under device folder, but it will not be assigned to zone or router as it is not mandatory steps as mentioned in the Strata Cloud Manager admin guide.



Additional Information


  • In  Panorama variables are only available under device and templates, but in SCM variables also available in policy and required in Network, zones and HA.
  • Variables can be define for  All interface IPs, Zones, Next Hop Routes, HA IPs (IP, Subnet, Group), Link/Path Monitor, etc.
  • It is suggested to always use a variable when you can configure the same.

 

 



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sd0rCAA&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail