Configure a Subinterface
Focus
Focus
Next-Generation Firewall

Configure a Subinterface

Table of Contents

Configure a Subinterface

Configure a Layer 2 or Layer 3 subinterface.
Contact your account team to enable Cloud Management for NGFWs using Strata Cloud Manager.
Where Can I Use This?
What Do I Need?
  • NGFW (Managed by Strata Cloud Manager)
  • VM-Series, funded with Software NGFW Credits
  • AIOps for NGFW Premium license (use the Strata Cloud Manager app)
You can configure a Layer 2 or Layer 3 subinterface to divide the physical interface configured for a zone.
  1. Log in to
    Strata Cloud Manager
    .
  2. Select
    Manage
    Configuration
    NGFW and Prisma Access
    Device Settings
    Interfaces
    Ethernet
    and select the Configuration Scope where you want to create the subinterface.
    Select a firewall from your
    Folders
    or select
    Snippets
    to configure the subinterface in a snippet.
    If you select a folder or select a snippet, you create a subinterface variable that must be assigned at the device level.
  3. Add the subinterface. Select (check) the interface you created and
    Add Sub Interface
    .
    You can configure a
    Sub Interface (Layer 2)
    or a
    Sub Interface (Layer 3)
    . Before you configure the subinterface, review the zone you want to associate the subinterface with. The interface type and zone interface type must match.
    • Folders and Snippets
      —Select (check) the interface you created and select
      Add Interface
      Add Sub Interface
      .
    • Firewalls
      —Select (check) the interface you created and select
      Add
      Add Sub Interface
      .
  4. Enter the
    Interface Name
    .
    The subinterface name is a numeric suffix of the interface that you selected. Supported interface names values are
    1
    —4094.
  5. Enter the VLAN
    Tag
    (
    1
    —4094).
    For ease of use, use the same number as a numeric suffix for the
    Interface Name
    .
  6. (
    Optional
    ) Enter a
    Description
    .
  7. (
    Folders and Snippets for a Layer 3 subinterface only; Optional
    ) Assign the interface to a
    Logical Router
    .
    See Configure a Logical Router for more information.
  8. (
    Folders and Snippets only; Optional
    ) Assign the subinterface to a
    Zone
    .
    Create New
    to create a new zone. See Zone Protection and DoS Protection for more information.
  9. (
    Layer 3 subinterface only
    ) Configure subinterface IP settings.
    1. Select the interface IP
      Type.
    • Static
      IPv4 Address.
      Add
      the IPv4 IP addresses for the interface.
    • Activate the
      DHCP Client
      on the subinterface.
      See Configure an Interface as a DHCP Client for more information on configuring the subinterface as a DHCP client.
  10. Save
    .
  11. Push Config
    to push your configuration changes.

Recommended For You