Configure Virtual Wires (SCM)

1. Log in to Strata Cloud Manager.
2. Configure two Ethernet or aggregate interfaces as virtual wire interface types.

   1. Select ManageConfigurationNGFW and Prisma AccessDevice SettingsInterfacesConfigurationNGFW and Prisma AccessDevice SettingsInterfaces.
   2. Select the first Ethernet or aggregate interface you cabled and set its Interface Type to Virtual Wire.
   3. Select the second Ethernet or aggregate interface you cabled and set its Interface Type to Virtual Wire.
   4. Save.

   Only interfaces configured with the Virtual Wire interface type are available for selection when configuring virtual wire members.
3. Create a zone for each interface you cabled.
4. Select ManageConfigurationNGFW and Prisma AccessDevice SettingsVirtual WireConfigurationNGFW and Prisma AccessDevice SettingsVirtual Wire and select the Configuration Scope where you want to create the virtual wire.

   Select Folders to configure the virtual wire in a folder or select Snippets to configure the virtual wire in a snippet.

   Adding a virtual wire in the firewall Configuration Scope isn't currently supported.
5. Add Virtual Wire.
6. Configure the interface members of the virtual wire.

   1. Enter a descriptive Name.
   2. Select the Member 1 Interface and Zone the interface is associated with.

      The Interface drop-down lists only Ethernet or aggregate interfaces that have been configured with the Virtual Wire interface type.
   3. Select the Member 2 Interface and Zone the interface is associated with.
7. Configure the virtual wire Advanced Settings.

   1. (Optional) Select Multicast Firewalling if you want to be able to apply Security policy rules to multicast traffic going across the virtual wire. Otherwise, multicast traffic is transparently forwarded across the virtual wire.
   2. Select Link State Pass Through if you want the firewall to function transparently. When the firewall detects a link down state for a link of the virtual wire, it brings down the other interface in the virtual wire pair. Thus, devices on both sides of the firewall see a consistent link state, as if there were no firewall between them. If you don't select this option, link status isn't propagated across the virtual wire.
   3. Select LLDP if you want to advertise the device attributes to neighboring devices.
   4. For Tag Allowed, enter 0 to indicate untagged traffic is allowed. The absence of a tag implies tag 0. Enter additional allowed tag integers or ranges of tags, separated by commas (default is 0; range is 0 to 4,094).
   5. Configure the Link Settings.

      1. Select the interface Link Speed.
         Auto is selected by default and allows the firewall to determine the speed.
      2. Select the interface Link Duplex transmission mode.
         Auto is selected by default to allow the firewall to negotiate the transmission mode automatically.
      3. Select the interface Link State
         Auto detect is selected by default to allow the firewall to determine the link state.
8. Save.