Configure a PA-7000 Series LFC for Logging per Virtual System

Create and configure an LFC subinterface for logging on multi-vsys.
If you have enabled multi-vsys capability on a PA-7000 Series firewall with a Log Forwarding Card (LFC) installed, you can configure logging for different virtual systems as described in the following workflow.
  1. Create a Log Forwarding Card subinterface.
    1. Select Device Log Forwarding Card and add a subinterface.
    2. For Interface Name, after the period, enter the subinterface assigned to the tenant’s virtual system.
    3. (Optional) Enter a Comment.
    4. For Tag, enter a VLAN tag value.
      Make the tag the same as the subinterface number for ease of use, but it can be a different number.
    5. On the Config tab, in the Assign Interface to Virtual System field, select the virtual system to which the LFC subinterface is assigned. Alternatively, you can click Virtual Systems to add a new virtual system.
    6. Click OK.
  2. (Optional) Enter the addresses assigned to the subinterface, and configure the default gateway.
    1. Select the Network tab, and do one or both of the following:
      • For the IPv4 section, enter the IP Address and Netmask assigned to the subinterface. Enter the Default Gateway (the next hop where packets will be sent that have no known next hop address in the Routing Information Base [RIB]).
      • For the IPv6 section, enter the IPv6 Address assigned to the subinterface. Enter the IPv6 Default Gateway.
    2. Click OK.
  3. Commit your changes.
    Click OK and Commit.

Related Documentation