Virtual Wire Subinterface
- Network > Interfaces > Ethernet
Virtual wire (vwire) subinterfaces allow you to separate traffic by VLAN tags or a VLAN tag and IP classifier combination, assign the tagged traffic to a different zone and virtual system, and then enforce security policies for the traffic that matches the defined criteria.
To add a Virtual Wire Interface select the row for that interface, click Add Subinterface, and specify the following information.
Virtual Wire Subinterface Settings
The read-only Interface Name displays the name of the vwire interface you selected. In the adjacent field, enter a numeric suffix (1-9,999) to identify the subinterface.
Enter an optional description for the subinterface.
Enter the VLAN tag (0-4,094) for the subinterface.
If you want to export unidirectional IP traffic that traverses an ingress subinterface to a NetFlow server, select the server profile or click Netflow Profile to define a new profile (see Device > Server Profiles > NetFlow). Selecting None removes the current NetFlow server assignment from the subinterface.
Click Add and enter an IP address, IP range, or subnet to classify the traffic on this vwire subinterface.
Select a virtual wire, or click Virtual Wire to define a new one (see Network > Virtual Wires). Select None to remove the current virtual wire assignment from the subinterface.
If the firewall supports multiple virtual systems and that capability is enabled, select a virtual system (vsys) for the subinterface or click Virtual System to define a new vsys.
Select a security zone for the subinterface, or click Zone to define a new zone. Select None to remove the current zone assignment from the subinterface.
PA-7000 Series Layer 2 Subinterface
PA-7000 Series Layer 2 Subinterface Network > Interfaces > Ethernet For each Ethernet port configured as a physical Layer 2 interface, you can define an ...
Virtual Wire Subinterfaces
You can create subinterfaces on a virtual wire and then apply different policies to different traffic zones based on VLAN tags. You can further separate ...
Common Building Blocks for Firewall Interfaces
Common Building Blocks for Firewall Interfaces Select Network Interfaces to display and configure the components that are common to most interface types. For a description ...
Log Card Subinterface
Log Card Subinterface Network > Interfaces > Ethernet To add a Log Card Interface , select the row for that interface, Add Subinterface , and ...
Layer 3 Subinterface
Layer 3 Subinterface Network > Interfaces > Ethernet For each Ethernet port configured as a physical Layer 3 interface, you can define additional logical Layer ...
Virtual Wire Interface
Virtual Wire Interface Network > Interfaces > Ethernet A virtual wire logically binds two Ethernet interfaces together, allowing for all traffic to pass between the ...
Configure the Network Interfaces
Configure the Network Interfaces Configure the Ethernet interfaces that connect the firewall to the ACI leaf switches. The VLAN ID number used in this configuration ...
Configure the Network Interfaces
Configure the Network Interfaces Configure an aggregate Ethernet interface, member interfaces, and subinterface that your firewall uses to connect to the ACI leaf switches. If ...
Configure a Layer 2 Interface, Subinterface, and VLAN
Configure a Layer 2 Interface, Subinterface, and VLAN Configure Layer 2 Interfaces with VLANs when you want Layer 2 switching and traffic separation among VLANs. ...