Matrix/discussion of capability with the differing interface deployment modes

[mpgioia]

Is there a discussion or KB article that discusses a matrix/capability of the differing interface deployment modes.

I.e.,  Layer2's pros and cons, Vwire's pros and cons, etc.

[reaper · Accepted solution]

there is one now 🙂

there's a section in the Admin guide that shortly describes all types of interfaces: Interface Deployments

any specific differences you are looking for ? let me try to list a few (for layer 2 interfaces, there is a layer3 config you can enable for the layer3 functionality so it's not strictly _on_ layer2, it does add the support to the layer2)

supports:	vwire	layer2	layer3	tap
vlan tags	y	y	y	y
tagged subinterfaces	y	y	y	n
untagged subinterfaces	n	n	y	n
minimum physical interfaces	2/vwire	1	1	1/tap
maximum physical interfaces	2/vwire	all	all	all
routing	n	y	y	n
nat	y	y	y	n
wirespeed/SPPP	y	y	y	y
qos	y	y	y	n
dhcp	n	y	y	n
ssl decryption	y	y	y	y-inbound n-outbound
Captive Portal	y	y	y	n
policy based forwarding	n	y	y	n

[mpgioia]

That is literally what I was after.. a matrix like that...
PAN reps should publish this as a KB. Brilliant ! & Thankyou.

[Anon1]

Hello,

the design guide describes the different deployment modes with their advantages / disadvantages:

https://live.paloaltonetworks.com/t5/Integration-Articles/Designing-Networks-with-Palo-Alto-Networks...