Configure a Layer 2 Interface, Subinterface, and VLAN
Table of Contents
Expand All
|
Collapse All
Next-Generation Firewall Docs
-
-
- Cloud Management of NGFWs
- PAN-OS 10.0 (EoL)
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1 & Later
- PAN-OS 9.1 (EoL)
-
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1 & Later
-
-
- Cloud Management and AIOps for NGFW
- PAN-OS 10.0 (EoL)
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1
- PAN-OS 11.2
- PAN-OS 8.1 (EoL)
- PAN-OS 9.0 (EoL)
- PAN-OS 9.1 (EoL)
Configure a Layer 2 Interface, Subinterface, and VLAN
Configure Layer
2 Interfaces with VLANs when you want Layer 2 switching and
traffic separation among VLANs. You can optionally control non-IP
protocols between security zones on a Layer 2 interface or between
interfaces within a single zone on a Layer 2 VLAN.
- Configure a Layer 2 interface and subinterface and assign a VLAN ID.
- Select NetworkInterfacesEthernet and select an interface. The Interface Name is fixed, such as ethernet1/1.For Interface Type, select Layer2.Select the Config tab.For VLAN, leave the setting None.Assign the interface to a Security Zone or create a New Zone.Click OK.With the Ethernet interface highlighted, click Add Subinterface.The Interface Name remains fixed. After the period, enter the subinterface number, in the range 1 to 9,999.Enter a VLAN Tag ID in the range 1 to 4,094.Assign the subinterface to a Security Zone.Click OK.Commit.Click Commit.(Optional) Apply a Zone Protection profile with protocol protection to control non-IP protocol packets between Layer 2 zones (or between interfaces within a Layer 2 zone).