Hi @jiaming9966 ,
Welcome! You can create a Layer 2 interface and appropriate subinterfaces. For example, you can add 2 subinterfaces to eth1/7. You can name it however you prefer. You can have it reflect which vlan that subinterface belongs to. If Citrix is vlan 20 and VIP is vlan 30 for example, then the subints would appear below eth1/7 as "ethernet1/7.20 and ethernet1/7.30". Once the interface name is complete, you can tag with appropriate vlan. Then, you can hover over vlan and security zone to create the appropriate vlan/zone and assign the subinterface to. In the vlan interface creation is where you will attach your virtual router.
Check out a more detailed guide on techdocs.
... View more