faysalji Lv3Posted 02 May 2023 18:09
  
Yes, it is possible to create sub-interfaces with 802.1q VLAN ID on an NGFW (Next-Generation Firewall) that supports LACP (Link Aggregation Control Protocol). Sub-interfaces are virtual interfaces created on a physical interface of a device, and they allow you to divide a physical interface into multiple logical interfaces.

To configure sub-interfaces on an NGFW, you would typically follow these steps:

Configure the physical interface with LACP. This involves connecting the physical interface to one or more other interfaces using LACP to create a logical link aggregation group.

Create the sub-interface. Specify the parent physical interface and the VLAN ID for the sub-interface.

Configure the sub-interface with the appropriate IP address, subnet mask, and other relevant network parameters.

Here's an example configuration for a sub-interface with VLAN ID 10 on a physical interface called eth0 that is already configured with LACP:

interface eth0
  lacp mode active
  lacp timer fast

interface eth0.10
  vlan-id 10
  ip address 192.168.1.1/24
  description VLAN 10
In this example, the "interface eth0" command configures the physical interface with LACP in active mode with fast timers. The "interface eth0.10" command creates the sub-interface with VLAN ID 10 and assigns it an IP address of 192.168.1.1/24. The "description" command is optional and can be used to provide a description for the sub-interface.

Note that the exact configuration syntax may vary depending on the NGFW vendor and model.

I Can Help:

Change

Moderator on This Board

0
2
4

Started Topics

Followers

Follow

67
14
3

Started Topics

Followers

Follow

3
0
2

Started Topics

Followers

Follow

1
131
3

Started Topics

Followers

Follow

Board Leaders