Focus

PAN-OS Web Interface Help

Firewall Interfaces Overview

Table of Contents

Firewall Interfaces Overview

The interface configurations of firewall data ports enable traffic to enter and exit the firewall. A Palo Alto Networks® firewall can operate in multiple deployments simultaneously because you can Configure Interfacesto support different deployments. For example, you can configure the Ethernet interfaces on a firewall for virtual wire, Layer 2, Layer 3, and tap mode. The interfaces that the firewall supports are:

Physical Interfaces—The firewall supports two types of media—copper and fiber optic—that can send and receive traffic at different transmission rates. You can configure Ethernet interfaces as the following types: tap, high availability (HA), log card (interface and subinterface), decrypt mirror, virtual wire (interface and subinterface), Layer 2 (interface and subinterface), Layer 3 (interface and subinterface), and aggregate Ethernet. The available interface types and transmission speeds vary by hardware model.
Logical Interfaces—These include virtual local area network (VLAN) interfaces, loopback interfaces, tunnel interfaces, and SD-WAN interfaces. You must set up the physical interface before defining a VLAN, SD-WAN, or tunnel interface.

Network > Interfaces

Common Building Blocks for Firewall Interfaces