Virtual Wire Subinterface

  • Network > Interfaces > Ethernet
Virtual wire (vwire) subinterfaces allow you to separate traffic by VLAN tags or a VLAN tag and IP classifier combination, assign the tagged traffic to a different zone and virtual system, and then enforce security policies for the traffic that matches the defined criteria.
To add a Virtual Wire Interface select the row for that interface, click Add Subinterface, and specify the following information.
Virtual Wire Subinterface Settings
Description
Interface Name
The read-only Interface Name displays the name of the vwire interface you selected. In the adjacent field, enter a numeric suffix (1-9,999) to identify the subinterface.
Comment
Enter an optional description for the subinterface.
Tag
Enter the VLAN tag (0-4,094) for the subinterface.
Netflow Profile
If you want to export unidirectional IP traffic that traverses an ingress subinterface to a NetFlow server, select the server profile or click Netflow Profile to define a new profile (see Device > Server Profiles > NetFlow). Selecting None removes the current NetFlow server assignment from the subinterface.
IP Classifier
Click Add and enter an IP address, IP range, or subnet to classify the traffic on this vwire subinterface.
Virtual Wire
Select a virtual wire, or click Virtual Wire to define a new one (see Network > Virtual Wires). Select None to remove the current virtual wire assignment from the subinterface.
Virtual System
If the firewall supports multiple virtual systems and that capability is enabled, select a virtual system (vsys) for the subinterface or click Virtual System to define a new vsys.
Security Zone
Select a security zone for the subinterface, or click Zone to define a new zone. Select None to remove the current zone assignment from the subinterface.

Related Documentation