L2 subinterface + L3 subinterface on the same interface

migisvendors — Tue, 27 Aug 2013 17:47:24 GMT

Hello all,

Is it possible to create an L2 tagged sub-interface and an L3 tagged sub-interface on the same physical interface.

For example.

Ethernet 1/6

Ethernet 1/6.100 --- L2 Interface. Security Zone "IPS only". /* this sub-interface will be used to Content-ID scan servers sitting on the same subnet as this interface but connected to another L2 interface on the same PaloAlto */

Ethernet 1/6.100 --- L3 - IP 204.50.105.195 Security Zone Untrusted /* this sub- interface that will deliver/NAT traffic in and out to a Trusted security zone on another L3 interface which is connected to the same PaloAlto /*

Is this possible? Doesn't look like it to me, but maybe it is.

Please let me know if any additional information is needed.

Thanks,

Matt

Re: L2 subinterface + L3 subinterface on the same interface

kadak — Tue, 27 Aug 2013 18:14:06 GMT

Hello Matt,

Yes.It is not possible to configure a L2 and a L3 sub-interface under one physical interface. Because, when you create that physical interface initially, we have to select 'interface type' option. So we select layer 3 as interface type, all the sub-interfaces under that physical interface should be layer 3 only

Hope that helps!

Regards,

Kunal Adak

topic Re: L2 subinterface + L3 subinterface on the same interface in General Topics

L2 subinterface + L3 subinterface on the same interface

Re: L2 subinterface + L3 subinterface on the same interface