Multiple subinterfaces with same VLAN tag

[will74103]

Will the Palo Alto support using the same VLAN tag on multiple L3 subinterfaces?

[pantac]

no. this is an invalid configuration and will fail to commit (the commit process does some checking for invalid configuration settings, marks this as invalid and gives a configuration error).

e.g.

• Logical interface ethernet1/7.2 configured with tag value 2000. No two logical intefaces can have same tag value.
• Logical interface ethernet1/7.5 configured with tag value 2000. No two logical intefaces can have same tag value.
• Configuration is invalid

[will74103]

You example is of the same tag on multiple subinterfaces on the same physical interface.   Would this work if the VLAN tag were on subinterfaces on different physical interfaces?

IE

1/5.2 and 1/6.2  etc.   Assigning address of each on same subnet?

[rnitz]

Yes, you can assign the same vlan tag to different interfaces like you are showing.  But if these interfaces are assigned to the same virtual router, they can not have ip addresses in the same range.  Or, if the ip addreses are in the same range, these interfaces need to be assigned to different virtual routers.

[will74103]

Excellent.  I will try this out.