Cyber Security - Palo Alto Firewall Interface Types

Multiple options to integrate the Palo Alto Firewall into your:

• Network
• Layer 2 interfaces and VLAN interfaces
• Layer 3 interfaces
• Tap interfaces
• Loopback and tunnel interfaces
• HA interfaces

Type 1 - Layer 2 interfaces:

• Allows a Trunk interface to transmit
• Tagged VLAN's which can be assigned to VLAN interfaces
• Can be allocated in port channels (link aggregation with LACP)

Configure a Layer2 interface with Wired-VLAN20.

Add a layer2 subinterface.

Add a Wireless-VLAN30 subinterface.

Type2 - Layer 3 interfaces:

• Carries end-to-end Layer 3 traffic with an assigned IP address.
• Can be allocated in port channels(link aggregation with LACP)
• Can be sub-divided in L3 Subinterfaces.

Add a layer3 interface.

Type3 - Tunnel and loopback interfaces:

• Used to logically assign attributes to tunnel entry/exit points
• Loopbacks: Create always-on logical interfaces for required applications.

Configure a tunnel.

Confiture Loopback

Configure Virtual Router

Configure IPsec Tunnels here.

Typer 4 - HA(High availability interfaces):

• Allows connectively between two Palo Alto Firewalls to establish a highly available Firewall setup
• HA links will carry required information to build the cluster, and sync routing/configuration across the members.

Configure HA interface.

Enable HA setup.

Configure the Control Link.

https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/high-availability/set-up-activepassive-ha/configure-activepassive-ha