Configure a Layer 2 Interface, Subinterface, and VLAN (SCM)

1. Configure a Layer 2 Interface
2. Add the subinterface. Select (check) the interface you created and Add Sub Interface.

   You can configure a Sub Interface (Layer 2) or a Sub Interface (Layer 3). Before you configure the subinterface, review the zone you want to associate the subinterface with. The interface type and zone interface type must match.

   • Folders and Snippets—Select (check) the interface you created and select Add InterfaceAdd Sub Interface.
   • Firewalls—Select (check) the interface you created and select AddAdd Sub Interface.
3. Enter the Interface Name.

   The subinterface name is a numeric suffix of the interface that you selected. Supported interface names values are 1—4094.
4. Enter the VLAN Tag (1—4094).

   For ease of use, use the same number as a numeric suffix for the Interface Name.
5. (Optional) Enter a Description.
6. (Folders and Snippets for a Layer 3 subinterface only; Optional) Assign the interface to a Logical Router.

   See Configure a Logical Router for more information.

   Selecting a global router will prompt a message asking if you want to override and remove the inherited objects. Click Yes to confirm.
7. (Folders and Snippets only; Optional) Assign the subinterface to a Zone.

   Create New to create a new zone. See Zone Protection and DoS Protection for more information.

   Selecting an inherited zone overrides the previous settings and removes any inherited objects. Any changes made to the global folder are no longer inherited in a top-down manner. A message appears, indicating that the interface settings will be overridden and the inherited objects from the parent folder will be removed on all firewalls. When you save your changes, a confirmation message appears. If you confirm, the zone is overridden.
8. (Layer 3 subinterface only) Configure subinterface IP settings.

   1. Select the interface IP Type.

   • Static IPv4 Address.
     Add the IPv4 IP addresses for the interface.
   • Activate the DHCP Client on the subinterface.
     See Configure an Interface as a DHCPv4 Client for more information on configuring the subinterface as a DHCP client.
9. Save.
10. Push Config to push your configuration changes.
11. Configure a VLAN.

    VLANs support Layer 2 interfaces only.
12. Enter the Interface Name.

    By default, all VLANs are prefixed with vlan.
13. (Optional) Enter a Description.
14. (Folders and Snippets only; Optional) Assign the VLAN to a Logical Router.

    See Configure a Logical Router for more information.

    Selecting a global router will prompt a message asking if you want to override and remove the inherited objects. Click Yes to confirm.
15. (Folders and Snippets only; Optional) Assign the interface to a Zone.

    Create New to create a new zone. See Zone Protection and DoS Protection for more information.

    Selecting an inherited zone overrides the previous settings and removes any inherited objects. Any changes made to the global folder are no longer inherited in a top-down manner. A message appears, indicating that the interface settings will be overridden and the inherited objects from the parent folder will be removed on all firewalls. When you save your changes, a confirmation message appears. If you confirm, the zone is overridden.
16. Add the Layer 2 Ethernet Interfaces you created in the previous step.
17. Configure the VLAN IP settings.

    1. Select the VLAN IP Type.

    • Static IPv4 Address.
      Add the IPv4 IP addresses for the interfaces in the VLAN.
    • Activate the DHCP Client on the VLAN.
      See Configure an Interface as a DHCPv4 Client for more information on configuring the VLAN as a DHCP client.
18. Save.
19. Push Config to push your configuration changes.