For each Ethernet port configured as a physical Layer 2 interface,
you can define an additional logical Layer 2 interface (subinterface)
for each VLAN tag assigned to the traffic that the port receives.
To enable switching between Layer 2 subinterfaces, assign the same
VLAN object to the subinterfaces.
To configure a PA-7000
Series Layer 2 Interface, select the row of that physical
Interface, click Add Subinterface, and specify the
following information.
Layer 2 Subinterface Settings
Description
Interface Name
The read-only Interface Name displays the
name of the physical interface you selected. In the adjacent field,
enter a numeric suffix (1-9,999) to identify the subinterface.
Comment
Enter an optional description for the subinterface.
Tag
Enter the VLAN tag (1-4,094) for the subinterface.
Netflow Profile
If you want to export unidirectional IP
traffic that traverses an ingress subinterface to a NetFlow server,
select the server profile or click Netflow Profile to
define a new profile (see Device
> Server Profiles > NetFlow). Select None to
remove the current NetFlow server assignment from the subinterface.
VLAN
To enable switching between Layer 2 interfaces
or to enable routing through a VLAN interface, select a VLAN, or
click VLAN to define a new VLAN (see Network
> VLANs). Select None to remove the
current VLAN assignment from the subinterface.
Virtual System
If the firewall supports multiple virtual
systems and that capability is enabled, select a virtual system
(vsys) for the subinterface or click Virtual System to
define a new vsys.
Security Zone
Select a security zone for the subinterface
or click Zone to define a new zone. Select None to
remove the current zone assignment from the subinterface.
