CNSE 4.1 Exam Preparation GuideV3.pptx - Palo Alto Networks

Five Physical Interface Types:
1. Tap mode interfaces simply listen to a span/mirror port of a switch
2. Virtual wire
- EXACTLY two interfaces, what comes in one, goes out the other
- Can be any combo (copper-copper, fiber-fiber, copper-fiber)
- no MAC address or IP addresses on the interfaces
- the device is still a stateful firewall and can block traffic
3. L2
- multiple interfaces can be configured into a “virtual-switch” or VLAN in L2
mode. L2 Interfaces do not participate in STP, as Spanning Tree Protocol
is not supported
4. L3
- IP address is required, all layer-3 operations available.
5. HA (on all devices except the 4000 and 5000 series, you must configure two
traffic ports as the HA ports)
Note that all interfaces, regardless of type, can be simultaneously supported.
Page 8 |