All Palo Alto Networks® next-generation firewalls provide a flexible networking architecture that includes support for dynamic routing, switching, and VPN connectivity, and enables you to deploy the firewall into nearly any networking environment. When configuring the Ethernet ports on your firewall, you can choose from virtual wire, Layer 2, or Layer 3 interface deployments. In addition, to allow you to integrate into a variety of network segments, you can configure different types of interfaces on different ports. The
section provides basic information on each type of deployment. For more detailed deployment information, refer to
Designing Networks with Palo Alto Networks Firewalls.
For information on route distribution, refer to
Understanding Route Redistribution and Filtering.