Focus

PAN-OS Web Interface Reference

Virtual Wire Subinterface

Table of Contents

Virtual Wire Subinterface

Network > Interfaces > Ethernet

Virtual wire (vwire) subinterfaces allow you to separate traffic by VLAN tags or a VLAN tag and IP classifier combination, assign the tagged traffic to a different zone and virtual system, and then enforce security policies for the traffic that matches the defined criteria.

To add a Virtual Wire Interface select the row for that interface, click Add Subinterface, and specify the following information.

Virtual Wire Subinterface Settings	Description
Interface Name	The read-only Interface Name displays the name of the vwire interface you selected. In the adjacent field, enter a numeric suffix (1-9,999) to identify the subinterface.
Comment	Enter an optional description for the subinterface.
Tag	Enter the VLAN tag (0-4,094) for the subinterface.
Netflow Profile	If you want to export unidirectional IP traffic that traverses an ingress subinterface to a NetFlow server, select the server profile or click Netflow Profile to define a new profile (see Device > Server Profiles > NetFlow). Selecting None removes the current NetFlow server assignment from the subinterface.
IP Classifier	Click Add and enter an IP address, IP range, or subnet to classify the traffic on this vwire subinterface.
Virtual Wire	Select a virtual wire, or click Virtual Wire to define a new one (see Network > Virtual Wires). Select None to remove the current virtual wire assignment from the subinterface.
Virtual System	If the firewall supports multiple virtual systems and that capability is enabled, select a virtual system (vsys) for the subinterface or click Virtual System to define a new vsys.
Security Zone	Select a security zone for the subinterface, or click Zone to define a new zone. Select None to remove the current zone assignment from the subinterface.

Virtual Wire Interface

PA-7000 Series Layer 2 Interface