AIOps for NGFW Premium license (use the Strata Cloud Manager app)
Create a virtual wire to bind two Ethernet interfaces together. This procedure
assumes that you’ve already cabled the Ethernet interfaces you want to bind
together.
Log in to Strata Cloud Manager.
Create a Zone for
each Ethernet interface you cabled.
Select ManageConfigurationNGFW and Prisma AccessDevice SettingsVirtual Wire and select the Configuration Scope where you want to create the
virtual wire.
Select Folders to configure the virtual wire in a
folder or select Snippets to configure the virtual
wire in a snippet.
Adding a virtual wire in the firewall Configuration Scope isn’t currently
supported.
Add Virtual Wire.
Configure the Ethernet interface members of the virtual wire.
Enter a descriptive Name.
Select the Member 1 Interface and
Zone the interface is associated with.
Select the Member 2 Interface and
Zone the interface is associated with.
Configure the virtual wire Advanced Settings.
(Optional) Select Multicast Firewalling
if you want to be able to apply Security policy rules to multicast
traffic going across the virtual wire. Otherwise, multicast traffic is
transparently forwarded across the virtual wire.
Select Link State Pass Through if you want the
firewall to function transparently. When the firewall detects a link
down state for a link of the virtual wire, it brings down the other
interface in the virtual wire pair. Thus, devices on both sides of the
firewall see a consistent link state, as if there were no firewall
between them. If you don’t select this option, link status isn’t
propagated across the virtual wire.
Select LLDP if you want to advertise the device
attributes to neighboring devices.
For Tag Allowed, enter 0
to indicate untagged traffic is allowed. The absence of a tag implies
tag 0. Enter additional allowed tag integers or
ranges of tags, separated by commas (default is
0; range is 0 to
4,094).
Configure the Link Settings.
Select the interface Link Speed.
Auto is selected by default and allows
the firewall to determine the speed.
Select the interface Link Duplex
transmission mode.
Auto is selected by default to allow
the firewall to negotiate the transmission mode
automatically.
Select the interface Link State
Auto detect is selected by default to allow the firewall to
determine the link state.
