>
    Strata Copilot
    Add and Configure a Virtual Interface
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN Administrator’s Guide
    4. Prisma SD-WAN Sites and Devices
    5. Prisma SD-WAN Ports and Interfaces
    6. Virtual Interface
    7. Add and Configure a Virtual Interface
    Download PDF
    Prisma SD-WAN

    Add and Configure a Virtual Interface

    Table of Contents

    Add and Configure a Virtual Interface

    Learn to add and configure a virtual interface. The interfaces can be either controller ports or non-controller ports.
    Where Can I Use This?What Do I Need?
    • Prisma SD-WAN (Managed by Strata Cloud Manager)
    • Prisma SD-WAN
    A virtual interface refers to a software-based interface that emulates a physical one, used for a variety of logical networking purposes such as VLAN subinterfaces, loopback interfaces, or interfaces in virtual wire mode. It differs from a port channel, which is a configuration that bundles multiple physical Ethernet ports into a single logical interface for increased bandwidth and redundancy.
    1. Select ConfigurationPrisma SD-WANION DevicesClaimed, select the device you want to configure and then select a port on the device to configure for HA.
    2. On the device's interface configuration page, select the Interfaces+ Add Interface to add a virtual interface.
    3. In the General section,
      1. Enter a Name and (Optional) Description, and add Tags for the port channel interface.
      2. For Admin Up, select No or Yes to administratively bring down the interface or bring up the interface.
        • An interface will not be operational if Admin Up is No.
        • Admin Up must be Yes for a virtual interface with controller ports.
        • Admin Up can be Yes or No for a virtual interface with non-controller ports.
    4. In the Network Setting section,
      1. For Virtual Interface Members, select a maximum of two interfaces from the drop-down.
        The interfaces can be either controller ports or non-controller ports. A combination of controller and non-controller ports is not allowed. Configuring the second controller port provides port-level and cable-level redundancy.
      2. For Use These Ports For, select an appropriate option from the drop-down.
        • For controller ports, the option can be None.
        • For non-controller ports, the available options are: LAN, Internet, and Private WAN.
      3. For Security Zone, select a device to bind.
      4. For IPv4 Configuration, select DHCP or Static.
        • If the IP address dynamically assigned, select DHCP.
        • If the IP address is fixed and specified manually, select Static. If you select Static, specify the IP Address/Mask, Default Gateway, and DNS server(s).
      5. Select Enable IPv6 On This Interface to configure IPv6.
      6. For IPv6 Configuration, select AutoConf or Static.
        Autoconf (automatic interface configuration) indicates the Global IP address is derived using stateless address autoconfiguration (SLAAC).
        Choose Static if the IP address is fixed and is manually assigned. Additionally specify the IPv6 Address/Mask, Default Gateway (IPv6), and DNS server(s)(IPv6).
        IPv6 configuration is available for Private WAN and Internet ports.
      7. For Scope, select Global or Local.
        • When Global is selected, the IP addresses advertised into the Prisma SD-WAN Fabric.
        • When Local is selected the IP addresses are not advertised into the Prisma SD-WAN Fabric.
      8. For Circuit Label, select the circuit label that corresponds to the connection for this site.
        A circuit label cannot be attached to a virtual interface composed of two controller ports.
      9. If DHCP Relay functions are required, select DHCP. Change Add DHCP Relay from No to Yes.
    5. Create Virtual Interface to complete the configuration.

    © 2026 Palo Alto Networks, Inc. All rights reserved.