Configure a Virtual Wire

Log in to
Strata Cloud Manager
.
Create a Zone for each Ethernet interface you cabled.
Select
Manage
Configuration
NGFW and Prisma Access
Device Settings
Virtual Wire
and select the Configuration Scope where you want to create the virtual wire.
Select
Folders
to configure the virtual wire in a folder or select
Snippets
to configure the virtual wire in a snippet.
Adding a virtual wire in the firewall Configuration Scope isn’t currently supported.
Add Virtual Wire
.
Configure the Ethernet interface members of the virtual wire.
Enter a descriptive
Name
.
Select the Member 1
Interface
and
Zone
the interface is associated with.
Select the Member 2
Interface
and
Zone
the interface is associated with.
Configure the virtual wire
Advanced Settings
.
(
Optional
) Select
Multicast Firewalling
if you want to be able to apply Security policy rules to multicast traffic going across the virtual wire. Otherwise, multicast traffic is transparently forwarded across the virtual wire.
Select
Link State Pass Through
if you want the firewall to function transparently. When the firewall detects a link down state for a link of the virtual wire, it brings down the other interface in the virtual wire pair. Thus, devices on both sides of the firewall see a consistent link state, as if there were no firewall between them. If you don’t select this option, link status isn’t propagated across the virtual wire.
Select
LLDP
if you want to advertise the device attributes to neighboring devices.
For
Tag Allowed
, enter
0
to indicate untagged traffic is allowed. The absence of a tag implies tag
0
. Enter additional allowed tag integers or ranges of tags, separated by commas (default is
0
; range is
0
to
4,094
).
Configure the Link Settings.
Select the interface
Link Speed
.
Auto
is selected by default and allows the firewall to determine the speed.
Select the interface
Link Duplex
transmission mode.
Auto
is selected by default to allow the firewall to negotiate the transmission mode automatically.
Select the interface
Link State
Auto detect is selected by default to allow the firewall to determine the link state.
Save
.