Typical Configuration Example of Firewall Sub-Interface

1 Device Model and Firmware

Device Type	Device Model	Version
NGFW	RG-WALL  1600-Z-S series firewall	NGFW_NTOS1.0

2 Service Requirements

Firewall interfaces need to connect and communicate with VLAN-enabled devices to send Layer 2 VLAN packets.
3. Topology

3. Configuration Description

Item	Note
ISP	Interfaces  connected to an Internet service provider (ISP) device should carry VLAN  tags.

4. Configuration Roadmap
Configure a sub-interface on the firewall interface connected to the ISP device and set the VLAN ID of the sub-interface to 10.
1.5 Configuration Procedure

To create a sub-interface on the physical interface connected to the ISP device, choose Network >Interface > Sub-interface and click Create.

Select a physical interface and set the VLAN ID to 10 (the sub-interface ID is also 10).

Select DHCP to enable thesub-interface to automatically obtain an IP address from the ISP device.

1.6 Verification

Verify that the sub-interface obtains an IP address, and can ping the ISP gateway address and other public IP addresses.