PA-7000 Series Layer 2 Interface
- Network > Interfaces > Ethernet
Select NetworkInterfacesEthernet to configure a Layer 2 interface. click the name of an Interface (ethernet1/1, for example) that is not configured and specify the following information.
Layer 2 Interface Settings
The interface name is predefined and you cannot change it.
Enter an optional description for the interface.
If you want to export unidirectional IP traffic that traverses an ingress interface to a NetFlow server, select the server profile or click Netflow Profile to define a new profile (see Device > Server Profiles > NetFlow). Select None to remove the current NetFlow server assignment from the interface.
To enable switching between Layer 2 interfaces or to enable routing through a VLAN interface, select an existing VLAN or click VLAN to define a new VLAN (see Network > VLANs). Select None to remove the current VLAN assignment from the interface.
If the firewall supports multiple virtual systems and that capability is enabled, select a virtual system for the interface or click Virtual System to define a new vsys.
Select a Security Zone for the interface or click Zone to define a new zone. Select None to remove the current zone assignment from the interface.
Select the interface speed in Mbps (10, 100, or 1000) or select auto to have the firewall automatically determine the speed.
Select whether the interface transmission mode is full-duplex (full), half-duplex (half), or negotiated automatically (auto).
Select whether the interface status is enabled (up), disabled (down), or determined automatically (auto).
Select to enable Link Layer Discovery Protocol (LLDP) on the interface. LLDP functions at the link layer to discover neighboring devices and their capabilities.
If LLDP is enabled, select an LLDP profile to assign to the interface or click LLDP Profile to create a new profile (see Network > Network Profiles > LLDP Profile). Select None to configure the firewall to use global defaults.
Enable in HA Passive State
If LLDP is enabled, select to allow an HA passive firewall to pre-negotiate LLDP with its peer before the firewall becomes active.
Virtual Wire Interface
Virtual Wire Interface Network > Interfaces > Ethernet A virtual wire logically binds two Ethernet interfaces together, allowing for all traffic to pass between the ...
PA-7000 Series Layer 2 Subinterface
PA-7000 Series Layer 2 Subinterface Network > Interfaces > Ethernet For each Ethernet port configured as a physical Layer 2 interface, you can define an ...
Tap Interface Network > Interfaces > Ethernet You can use a tap interface to monitor traffic on a port. To configure a tap interface, click ...
Common Building Blocks for Firewall Interfaces
Common Building Blocks for Firewall Interfaces Select Network Interfaces to display and configure the components that are common to most interface types. For a description ...
PA-7000 Series Layer 3 Interface
PA-7000 Series Layer 3 Interface Network > Interfaces > Ethernet To configure a Layer 3 interface, click the name of an Interface (ethernet1/1, for example) ...
Virtual Wire Subinterface
Virtual Wire Subinterface Network > Interfaces > Ethernet Virtual wire (vwire) subinterfaces allow you to separate traffic by VLAN tags or a VLAN tag and ...
Network > Interfaces > VLAN
Network > Interfaces > VLAN A VLAN interface can provide routing into a Layer 3 network (IPv4 and IPv6). You can add one or more ...
Network > Interfaces > Tunnel
Network > Interfaces > Tunnel Use the following fields to configure a tunnel interface: Tunnel Interface Settings Configure In Description Interface Name Tunnel Interface The ...
Use Case: Non-IP Protocol Protection Within a Security Zone on Layer 2 Interfaces
Use Case: Non-IP Protocol Protection Within a Security Zone on Layer 2 Interfaces If you don’t implement a Zone Protection profile with non-IP protocol protection, ...