Create Subinterface - Cisco Firepower 4100 Command Reference Manual

Fully integrated next-generation firewall
Hide thumbs Also See for Firepower 4100:
Table of Contents

Advertisement

create subinterface

create subinterface
To add a subinterface to a physical or EtherChannel interface for use with container instances, use the create
subinterface command.
create subinterface id
Syntax Description
id
scope eth-uplink/scope fabric a/scope interface/
Command Modes
scope eth-uplink/scope fabric a/create port-channel/
Command History
Release
2.4(1)
You can add between 250 and 500 VLAN subinterfaces to the chassis, depending on your network deployment.
Usage Guidelines
VLAN IDs per interface must be unique, and within a container instance, VLAN IDs must be unique across
all assigned interfaces. You can reuse VLAN IDs on separate interfaces as long as they are assigned to different
container instances. However, each subinterface still counts towards the limit even though it uses the same
ID.
For native instances, you can create VLAN subinterfaces within the application only. For container instances,
you can also create VLAN subinterfaces inside the application on interfaces that do not have FXOS VLAN
subinterfaces defined, and these subinterfaces are not subject to the FXOS limit. Choosing in which operating
system to create subinterfaces depends on your network deployment and personal preference. For example,
to share a subinterface, you must create the subinterface in FXOS. Another scenario that favors FXOS
subinterfaces comprises allocating separate subinterface groups on a single interface to multiple instances.
For example, you want to use Port-Channel1 with VLAN 2-11 on instance A, VLAN 12-21 on instance B,
and VLAN 22-31 on instance C. If you create these subinterfaces within the application, then you would have
to share the parent interface in FXOS, which may not be desirable. See the following illustration that shows
the three ways you can accomplish this scenario:
Cisco Firepower 4100/9300 FXOS Command Reference
76
Sets the ID between 1 and 4294967295. This ID will be appended to the parent
interface ID as interface_id.subinterface_id. For example, if you add a
subinterface to Ethernet1/1 with the ID of 100, then the subinterface ID will
be: Ethernet1/1.100. This ID is not the same as the VLAN ID, although you
can set them to match for convenience.
Modification
Command added.
A R Commands

Hide quick links:

Advertisement

Table of Contents
loading

This manual is also suitable for:

Firepower 9300

Table of Contents