...
Examples in this section show different results when you add a new inheritable extensible attribute to an object located at the top or in the middle of the inheritance chain based on the following:
| Object | Type | Extensible Attribute | Extensible Attribute Value | Inheritance State |
|---|---|---|---|---|
| 10.0.0.0/8 | Network Container | |||
| 10.0.0.0/16 | Network | Region | ABC | Native |
| 10.1.0.0/16 | Network |
Example 3.1: Add an extensible attribute Region with value DEF to 10.0.0.0/8
...
- For descendants that already have this extensible attribute, the existing extensible attribute will always be set to Inherit.
- For descendants that do not have this extensible attribute, the descendants will inherit this extensible attribute.
Result:
| Object | Type | Extensible Attribute | Extensible Attribute Value | Inheritance State |
|---|---|---|---|---|
| 10.0.0.0/8 | Network Container | Region | DEF | Native |
| 10.0.0.0/16 | Network | Region | DEF | Inherited from 10.0.0.0/8 |
| 10.1.0.0/16 | Network | Region | DEF | Inherited from 10.0.0.0/8 |
Example 3.2: Add an extensible attribute Region with value DEF to 10.0.0.0/8
...
- For descendants that already have this extensible attribute, the existing extensible attribute will always be set to Override.
- For descendants that do not have this extensible attribute, the descendants will not inherit this extensible attribute (extensible attribute is set to Do not Inherit).
Result:
| Object | Type | Extensible Attribute | Extensible Attribute Value | Inheritance State |
|---|---|---|---|---|
| 10.0.0.0/8 | Network Container | Region | DEF | Native |
| 10.0.0.0/16 | Network | Region | ABC | Overridden |
| 10.1.0.0/16 | Network | Region |
Example 3.3: Add an extensible attribute Region with value DEF to 10.0.0.0/8 8
...
- For descendants that already have this extensible attribute, the existing extensible attribute will always be set to Inherit.
- For descendants that do not have this extensible attribute, the descendants will not inherit this extensible attribute (extensible attribute is set to Do not Inherit).
Result:
| Object | Type | Extensible Attribute | Extensible Attribute Value | Inheritance State |
|---|---|---|---|---|
10.0.0.0/8 | Network Container | Region | DEF | Native |
10.0.0.0/16 | Network | Region | DEF | Inherited, Source 10.0.0.0/8 |
| 10.1.0.0/16 | Network | Region |
Example 4
Examples in this section show different results when you remove an existing inheritable extensible attribute from an object located at the top or in the middle of the inheritance chain based on the following:
| Object | Type | Extensible Attribute | Extensible Attribute Value | Inheritance State |
|---|---|---|---|---|
10.0.0.0/8 | Network Container | Region | DEF | Native |
10.0.0.0/16 | Network | Region | DEF | Inherited from 10.0.0.0/8 |
| 10.1.0.0/16 | Network | Region | ABC | Overridden |
Example 4.1: Remove extensible attribute Region with value DEF from 10.0.0.0/8
...
- Remove extensible attributes with inheritance state set to Inherited. Extensible attributes with the state set to Overridden are not removed.
Result:
| Object | Type | Extensible Attribute | Extensible Attribute Value | Inheritance State |
|---|---|---|---|---|
10.0.0.0/8 | Network Container | Region | ||
10.0.0.0/16 | Network | Region | ||
| 10.1.0.0/16 | Network | Region | ABC | Overridden |
Example 4.2: Remove extensible attribute Region with value DEF from 10.0.0.0/8 You select the following option for the existing extensible attribute:
- Preserve all descendant extensible attributes, whether the state is set to Inherited or Overridden. Result:
| Object | Type | Extensible Attribute | Extensible Attribute Value | Inheritance State |
|---|---|---|---|---|
10.0.0.0/8 | Network Container | |||
10.0.0.0/16 | Network | Region | DEF | Native |
| 10.1.0.0/16 | Network | Region | ABC | Native |
Example 5
Examples in this section show different results when you remove parent object based on the following:
| Object | Type | Extensible Attribute | Extensible Attribute Value | Inheritance State |
|---|---|---|---|---|
10.0.0.0/8 | Network Container | Region | DEF | Native |
10.0.0.0/16 | Network Container | Region | DEF | Inherited from 10.0.0.0/8 |
| 10.1.0.0/24 | Network | Region | DEF | Inherited from 10.0.0.0/8 |
| 10.1.0.0/24 | Network | Region | ABC | Overriden |
| 10.10.0.0/16 | Network Container | Region | GHI | Overriden |
| 10.10.0.0/24 | Network | Region | GHI | Inherited from 10.10.0.0/16 |
| 10.10.0.0/24 | Network | Region | JKL | Overridden |
Example 5.1: Removing object 10.0.0.0/8 from the parent level You select the following option for the existing extensible attribute:
...
Example 7
Examples in this section show different results after you modify inheritable extensible attributes with multiple values based on the following:
| Object | Type | Extensible Attribute | Extensible Attribute Value | Inheritance State |
|---|---|---|---|---|
10.0.0.0/8 | Network Container | |||
10.0.0.0/16 | Network Container | Region | MNO | Native |
| Region | PQR | Native |
Example 7.1: Adding extensible attribute Region with value GHI to 10.0.0.0/8 You select the following option for the existing extensible attributes:
...
- The descendants that already have this extensible attribute will override the value.
| Object | Type | Extensible Attribute | Extensible Attribute Value | Inheritance State |
|---|---|---|---|---|
10.0.0.0/8 | Network Container | Region | GHI | Native |
10.0.0.0/16 | Network | Region | DEF | Overridden |
| Region | ABC | Overridden |
Example 8
Examples in this section show different results after you modify existing inheritable extensible attribute of an object, but you do not have required permission to modify some descendants. For information about admin permissions, see About Administrative Permissions .
...
The appliance displays an error message when you remove an extensible attribute that is associated with a descendant for which you do not have required permission.
Result:
Object | Type | Extensible Attribute | Extensible Attribute Value | Inheritance State | Permission | ||
|---|---|---|---|---|---|---|---|
10.0.0.0/16 | Network Container | ||||||
10.0.0.0/24 | Network | ||||||
10.0.1.0/24 | Network | Owner | Bob | Overridden | Write | ||
10.10.0.0/16 | Network Container | Owner | John | Overridden | Read | ||
| 10.10.0.0/24 | Network | Owner | John | Inherited from 10.10.0.0/16 | Read | ||
| 10.20.0.0/16 | Network | Owner | Max | Overridden | Read | ||
| 10.20.0.0/24 | Network Container | Write | |||||
| 10.20.1.0/24 | Network | Read | |||||
Example 9
Examples in this section show different results after you join multiple networks, based on the following:
| Object | Type | Extensible Attribute | Extensible Attribute Value | Inheritance State |
|---|
- /16 NetworkOwnerJohn Native
- Fixed Address OwnerJohn Inherited from
...
10.1.0.0/16 | Network | Owner | ||
10.1.0.1 | Fixed Address | Owner | DEF | Native |
| 10.2.0.0/16 |
...
Network | Region | ABC | Native | |
| 10.2.0.1 | Fixed Address |
...
Example 9.1: Joining networks 10.0.0.0/8 with 10.1.0.0/16
You select the following option for the existing extensible attribute:
• Join networks 10.0.0.0/8 with 10.1.0.0/16. Result:
...