Configure a Layer 2 Interface, Subinterface, and VLAN
Configure Layer
2 Interfaces with VLANs when you want Layer 2 switching and
traffic separation among VLANs. You can optionally control non-IP
protocols between security zones on a Layer 2 interface or between
interfaces within a single zone on a Layer 2 VLAN.
Configure a Layer 2 interface and subinterface
and assign a VLAN ID.
Select
Network
Interfaces
Ethernet
and
select an interface. The
Interface Name
is
fixed, such as ethernet1/1.
For
Interface Type
, select
Layer2
.
Select the
Config
tab.
For
VLAN
, leave the setting
None
.
Assign the interface to a
Security Zone
or
create a
New Zone
.
Click
OK
.
With the Ethernet interface highlighted, click
Add
Subinterface
.
The
Interface Name
remains
fixed. After the period, enter the subinterface number, in the range
1 to 9,999.
Enter a VLAN
Tag
ID in the
range 1 to 4,094.
Assign the subinterface to a
Security Zone
.
Click
OK
.
Commit.
Click
Commit
.
(
Optional
) Apply a Zone Protection profile with
protocol protection to control non-IP protocol packets between Layer
2 zones (or between interfaces within a Layer 2 zone).
