Virtual Wire Interface
- Network > Interfaces > Ethernet
A virtual wire logically binds two Ethernet interfaces together, allowing for all traffic to pass between the interfaces, or just traffic with selected VLAN tags (no other switching or routing services are available). You can create virtual wire subinterfaces to classify traffic according to an IP address, IP range, or subnet. A virtual wire requires no changes to adjacent network devices. A virtual wire can bind two Ethernet interfaces of the same medium (both copper or both fiber optic), or bind a copper interface to a fiber optic interface.
To set up a virtual wire, decide which two interfaces to bind (NetworkInterfacesEthernet) and configure their settings as described in the following table.
If you are using an existing interface for the virtual wire, first remove the interface from any associated security zone.
Virtual Wire Interface Setting
The interface name is predefined and you cannot change it.
Enter an optional description for the interface.
Select Virtual Wire.
Select a virtual wire, or click Virtual Wire to define a new one (Network > Virtual Wires). Select None to remove the current virtual wire assignment from the interface.
If the firewall supports multiple virtual systems and that capability is enabled, select a virtual system for the interface or click Virtual System to define a new vsys.
Select a security zone for the interface, or click Zone to define a new zone. Select None to remove the current zone assignment from the interface.
Select a specific interface speed in Mbps or select auto to have the firewall automatically determine the speed. Both interfaces in the virtual wire must have the same speed.
Select whether the interface transmission mode is full-duplex (full), half-duplex (half), or negotiated automatically (auto). Both interfaces in the virtual wire must have the same transmission mode.
Select whether the interface status is enabled (up), disabled (down), or determined automatically (auto).
Select to enable Link Layer Discovery Protocol (LLDP) on the interface. LLDP functions at the link layer to discover neighboring devices and their capabilities.
If LLDP is enabled, select an LLDP profile to assign to the interface or click LLDP Profile to create a new profile (see Network > Network Profiles > LLDP Profile). Select None to configure the firewall to use global defaults.
Enable in HA Passive State
If LLDP is enabled, select to configure an HA passive firewall to pre-negotiate LLDP with its peer before the firewall becomes active.
If LLDP is not enabled, select to configure an HA passive firewall to simply pass LLDP packets through the firewall.
PA-7000 Series Layer 2 Interface
PA-7000 Series Layer 2 Interface Network > Interfaces > Ethernet Select Network Interfaces Ethernet to configure a Layer 2 interface. click the name of an ...
Configure Virtual Wires
Configuring a virtual wire includes configuring two Ethernet ports that use the same link speed as virtual wire interfaces, enabling link state pass through, and ...
Port Speeds of Virtual Wire Interfaces
Configure a virtual wire using two ports that operate at the same speed, whether they are both copper, both fiber optic, or one copper and ...
Virtual Wire Subinterface
Virtual Wire Subinterface Network > Interfaces > Ethernet Virtual wire (vwire) subinterfaces allow you to separate traffic by VLAN tags or a VLAN tag and ...
Tap Interface Network > Interfaces > Ethernet You can use a tap interface to monitor traffic on a port. To configure a tap interface, click ...
Virtual Wire Interfaces
Virtual wires bind two interfaces within a firewall, allowing you to easily install a firewall into a topology that requires no switching or routing by ...
PA-7000 Series Layer 3 Interface
PA-7000 Series Layer 3 Interface Network > Interfaces > Ethernet To configure a Layer 3 interface, select an interface (ethernet1/1, for example) and specify the ...
Common Building Blocks for Firewall Interfaces
Common Building Blocks for Firewall Interfaces Select Network Interfaces to display and configure the components that are common to most interface types. For a description ...
Configure Active/Passive HA
Configure Active/Passive HA The following procedure shows how to configure a pair of firewalls in an active/passive deployment as depicted in the following example topology. ...