You can create a subinterface only for a physical interface or an aggregated interface with the Data plane role. You cannot create a subinterface for an interface added to a L2 security zone.
When creating the first subinterface, the following parameters of the parent interface change and become uneditable:
You can create a subinterface in a network template or on a Kaspersky NGFW device: A subinterface created in a network template is automatically created on all devices that use this template.
To create a subinterface:
The table of network interfaces is displayed.
This opens the subinterface creation window.
You cannot change the VLAN ID after creating the subinterface.
If you select this option, you need to specify the IP addresses of the network interface with a mask in the IPv4 addresses section in the lower part of the page. Click Add to add more than one IP address. You can add up to 20 IP addresses.
If necessary, you can also delete an added IP address by selecting its row and clicking the Delete button.
To get the DNS server address from a DHCP server, set the corresponding toggle switch to Yes.
If you select this option, in the DNS servers section in the lower part of the page, you can specify IP addresses with masks of the DNS servers that you want to use. You can add up to 8 DNS servers.
If the IP address of the default static route is obtained from the DHCP server, you can view it in the static routing RIB table on the command line.
You can change the protocol only for interfaces included in the L3 security zone. For interfaces included in the L2 security zone, the None value is selected.
The MTU value of a subinterface cannot be greater than the MTU value of the parent interface. If you enter a value greater than that of the parent interface, the MTU of the subinterface is set to be equal to the MTU of the parent interface.
The created subinterface appears in the list of interfaces.
You need to create subinterfaces for all VLAN IDs that can arrive, otherwise any packets with VLAN IDs that do not have a matching subinterface are dropped.
Page top