Virtual wire (vwire) subinterfaces allow you to separate traffic
by VLAN tags or a VLAN tag and IP classifier combination, assign
the tagged traffic to a different zone and virtual system, and then
enforce security policies for the traffic that matches the defined
criteria.