>
    Strata Copilot
    Configure Breakout Port Interfaces (SCM)
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. Configure Interfaces
    4. Configure a Breakout Port Interface and Subinterface
    5. Configure Breakout Port Interfaces (SCM)
    Download PDF
    Next-Generation Firewall

    Configure Breakout Port Interfaces (SCM)

    Table of Contents

    Configure Breakout Port Interfaces (SCM)

    The procedure for configuring breakout port interfaces and subinterfaces.
    You can configure ethernet ports as breakout type interfaces at the device scope, which enables you to create individual broken-out ports that function as standard ethernet interfaces. The broken-out ports support all existing interface types including Layer 2, Layer 3, Virtual Wire, and Tap configurations, and you can create sub-interfaces from these ports as needed.

    Configure a Breakout Port Interface in Strata Cloud Manager

    1. Log in to Strata Cloud Manager.
    2. Select ConfigurationNGFW and Prisma AccessDeviceInterfacesEthernet and set the Configuration Scope to the Folder or supported device where you want to create the breakout port interface.
    3. Click Add Interface to create a new breakout interface.
    4. Configure the Interface.
      1. Enter or Select the Interface Name.
        When you configure an interface for a specific firewall, the Interface Name is fixed, such as ethernet1/1.
      2. Select the Default Interface Assignment.
        Ports 1, 2, 3, 4, 11, 12, 13, and 14 support breakout configuration.
      3. (Optional) Enter a Comment to add more details to the interface for other administrators..
      4. For Interface Type, select Breakout.
      5. Assign a Zone or Create New to create a new zone.
        Selecting an inherited zone overrides the previous settings and removes any inherited objects. Any changes made to the global folder are no longer inherited in a top-down manner. A message appears, indicating that the interface settings will be overridden and the inherited objects from the parent folder will be removed on all firewalls. When you save your changes, a confirmation message appears. If you confirm, the zone is overridden.
    5. Save.
    6. Push Config.

    Configure a Breakout Port Subinterface in Strata Cloud Manager

    1. Add Interface for the child interface.
    2. Configure the Interface.
      1. Enter or Select the Interface Name.
      2. Select the Default Interface Assignment.
        Select the Default Interface Assignment you wish to configure. It will appear with the breakout naming convention, such as ethernet1/1/1 or ethernet1/1/2 for the children of ethernet1/1.
      3. (Optional) Enter a Comment to add more details to the interface for other administrators..
      4. Select the interface type Interface Type. For the child interface, it does not have to be set to Breakout.
      5. Select the Logical Routers to assign the interface to.
      6. Assign a Zone or Create New to create a new zone.
        Selecting an inherited zone overrides the previous settings and removes any inherited objects. Any changes made to the global folder are no longer inherited in a top-down manner. A message appears, indicating that the interface settings will be overridden and the inherited objects from the parent folder will be removed on all firewalls. When you save your changes, a confirmation message appears. If you confirm, the zone is overridden.
      7. Configure the IP address.
    3. Save.
    4. Repeat Steps 1-3 as needed for the other child interfaces.
    5. Push Config.

    © 2026 Palo Alto Networks, Inc. All rights reserved.