• SonicOSX 7
• Interfaces
  • About Interfaces
    • Physical and Virtual Interfaces
      • Physical Interfaces
      • Virtual Interfaces (VLAN)
      • Subinterfaces
    • SonicOSX Secure Objects
    • One Arm Mode and Single Interface Support
    • Transparent Mode
    • IPS Sniffer Mode
      • Sample IPS Sniffer Mode Topology
    • Firewall Sandwich
    • HTTP/HTTPS Redirection
      • HTTP/HTTPS Redirection with DP Offload
    • Enabling DNS Proxy on an Interface
    • LTE Modem Support
    • LAN Bypass
  • Interface Settings IPv4
    • Adding Virtual Interfaces
      • Configuring General Settings for Virtual Interface
      • Configuring Advanced Settings for a Virtual Interface
      • Configuring Virtual Interfaces (VLAN Subinterfaces)
    • Configuring Routed Mode
    • Enabling Bandwidth Management on an Interface
    • Configuring Interfaces in Transparent IP Mode (Splice L3 Subnet)
      • Configuring Advanced Settings for a Transparent IP Mode Interface
    • Configuring Wireless Interfaces
      • Configuring Advanced Settings for a Wireless Interface
    • Configuring WAN Interfaces
      • Configuring Advanced Settings for a WAN Interface
      • Configuring Protocol Settings for a WAN Interface
    • Configuring Tunnel Interfaces
    • Configuring VPN Tunnel Interfaces
    • Configuring Link Aggregation and Port Redundancy
      • Link Aggregation
        • Link Aggregation Failover
        • Link Aggregation Limitations
        • Link Aggregation Configuration
      • Port Redundancy
        • Port Redundancy Failover
        • Port Redundancy Configuration
    • Configuring One Arm Mode
    • Configuring an IPS Sniffer Mode Appliance
      • Configuration Task List for IPS Sniffer Mode
      • Configuring the Primary Bridge Interface
      • Configuring the Secondary Bridge Interface
      • Configuring SNMP
      • Configuring IPS Sniffer Mode
    • Configuring Security Services (Unified Threat Management)
      • Configuring Logging
      • Connecting a Mirrored Switch Port to an IPS Sniffer Mode Interface
      • Connecting and Configuring a WAN Interface to the Data Center
    • Configuring Wire and Tap Mode
      • Configuring an Interface for Wire Mode
      • Configuring Wire Mode for a WAN/LAN Zone Pair
      • Configuring Wire Mode with Link Aggregation
    • Layer 2 Bridged Mode
      • Key Features of SonicOSX Layer 2 Bridged Mode
      • Key Concepts to Configuring L2 Bridged Mode and Transparent Mode
      • Comparing L2 Bridged Mode to Transparent Mode
        • Comparison of L2 Bridged Mode to Transparent Mode
        • Benefits of Transparent Mode over L2 Bridged Mode
        • ARP in Transparent Mode
        • VLAN Support in Transparent Mode
        • Multiple Subnets in Transparent Mode
        • Non-IPv4 Traffic in Transparent Mode
        • ARP in L2 Bridged Mode
        • VLAN Support in L2 Bridged Mode
        • L2 Bridge IP Packet Path
        • Multiple Subnets in L2 Bridged Mode
        • Non-IPv4 Traffic in L2 Bridged Mode
      • L2 Bridge Path Determination
      • L2 Bridge Interface Zone Selection
        • Security Services Directionality
        • Access Rule Defaults
        • WAN Connectivity
      • Sample Topologies
        • Wireless Layer 2 Bridge
        • Inline Layer 2 Bridged Mode
        • Perimeter Security
        • Internal Security
        • Layer 2 Bridged Mode with High Availability
        • Layer 2 Bridged Mode with SSL VPN
        • WAN to LAN Access Rules
      • Configuring Network Interfaces and Activating L2B Mode
        • Installing the Appliance between the Network and an SSL VPN Appliance
        • Configuring or Verifying Settings
      • Configuring Layer 2 Bridged Mode
        • Configuration Task List for Layer 2 Bridged Mode
        • Configuring the Common Settings for L2 Bridged Mode Deployments
          • Licensing Services
          • Disabling a DHCP Server
          • Configuring SNMP Settings
          • Enabling SNMP and HTTPS on the Interfaces
          • Enabling Syslog
          • Activating Security Services on Each Zone
          • Creating Access Rules
          • Configuring Log Settings
          • Configuring Wireless Zone Settings
        • Configuring Layer 2 Bridged Mode Procedure
          • Configuring the Primary Bridge Interface
          • Configuring the Secondary Bridge Interface
          • Configuring an L2 Bypass for Hardware Failures
        • VLAN Integration with Layer 2 Bridged Mode
        • VPN Integration with Layer 2 Bridged Mode
      • Asymmetric Routing
    • Configuring Interfaces for IPv6
  • 31-Bit Network Settings
    • 31-Bit Network Environment Example
    • Configuring a 31-Bit Network in SonicOSX
  • PPPoE Unnumbered Interface Support
    • Sample Network Topography
    • Caveats
    • Configuring a PPPoE Unnumbered Interface
    • Configuring HA with PPPoE Unnumbered
• Failover & LB
  • Settings
  • Groups
• Neighbor Discovery
  • Static NDP Entries
    • Adding Static NDP Entries
    • Editing Static NDP Entries
    • Deleting Static NDP Entries
  • NDP Settings
  • NDP Cache
    • Flushing the NDP Cache
• ARP
  • Static ARP Entries
    • Viewing Static ARP Entries
    • Adding Static ARP Entries
    • Editing Static ARP Entries
    • Deleting Static ARP Entries
    • Secondary Subnets with Static ARP
      • Adding a Secondary Subnet
        • Secondary Subnet Example
  • ARP Settings
  • ARP Cache
    • Flushing the ARP Cache
• MAC IP Anti-Spoof
  • MAC IPv4 and IPv6 Anti-Spoof Settings
  • Configuring MAC IP Anti-Spoof Settings
  • Anti-Spoof Cache
  • Spoof Detected List
• Web Proxy
  • User Proxy Servers
  • Automatic Proxy Forwarding (Web Only)
    • Adding User Proxy Servers
    • Editing User Proxy Servers
    • Deleting User Proxy Servers
• VLAN Translation
  • Mapping Modes
  • Mapping Persistence
  • Map Multiple Interface Pairs
  • Creating and Managing VLAN Maps
    • Creating a VLAN Map
      • Creating a Wire Mode Pair in Secure Mode
      • Creating the VLAN Mapping
    • Managing VLAN Mappings
      • Editing Mappings
      • Filtering Mappings
      • Deleting Mappings
• IP Helper
  • Using IP Helper
    • About IP Helper
      • VPN Tunnel Interface Support for IP Helper
      • DHCPv6 Relay
        • About DHCPv6 Relay
        • Configuring DHCPv6 Relay
    • IP Helper Settings
      • Relay Protocols
      • Policies
      • DHCP/DHCPv6 Relay Leases
  • Configuring IP Helper
    • Enabling IP Helper
    • Managing Relay Protocols
      • Adding User-Defined Relay Protocols
      • Deleting Custom Protocols
    • Managing IP Helper Policies
      • Adding an IP Helper Policy
      • Editing an IP Helper Policy
      • Deleting IP Helper Policies
    • Filtering Which DHCP Relay Leases are Displayed
    • Displaying IP Helper Cache from TSR
• Dynamic Routing
  • Route Advertisement
  • OSPFv2
  • OSPFv3
  • RIP
  • RIPng
  • Settings
• DHCP Server
  • Configuring a DHCP Server
    • Configuring the DHCP Server Settings
      • Configuring the DHCP Server for DNS Proxy
    • Configuring DHCP Server Lease Scopes
    • Current DHCP Leases
      • Current DHCP Leases IPv4
      • Current DHCP Leases IPv6
    • DHCPv6 Relay
  • Configuring Advanced Options
    • Configuring DHCP Option Objects
    • Configuring DHCP Option Groups
    • Configuring a Trusted DHCP Relay Agent Address Group (IPv4 Only)
    • Enabling Trusted DHCP Relay Agents
    • Configuring IPv4 DHCP Servers for Dynamic Ranges
      • Add DHCP Dynamic Scope
      • DNS/WINS
      • Advanced
    • Configuring IPv6 DHCP Servers for Dynamic Ranges
      • Add DHCPv6 Dynamic Scope
      • DNS
      • Advanced
    • Configuring IPv4 DHCP Static Ranges
      • Adding DHCPv4 Static Scope Settings
    • Configuring IPv6 DHCP Static Ranges
    • Configuring DHCP Generic Options for DHCP Lease Scopes
      • RFC-defined DHCP Option Numbers
    • DHCP and IPv6
• Multicast
  • Multicast Policies
    • Creating a Multicast Address Object
    • Creating a New Multicast Address Group
  • IGMP State
  • Enabling Multicast
    • Enabling Multicast on a LAN-Dedicated Interface
    • Enabling Multicast Support for Address Objects over a VPN Tunnel
• Network Monitor
  • About Network Monitor Policies
  • Configuring Network Monitor Policies
  • Deleting Network Monitor Policies
• AWS Configuration
  • AWS Security Credentials
    • IAM Group and User
  • Firewall Configuration
    • Test Connection
• SonicWall Support
  • About This Document

Configuring Advanced Settings for a Virtual Interface

To configure advanced settings for a static interface

1. In the Add/Edit Interface dialog, click Advanced.

   

   The options available in Advanced for a virtual interface vary depending on the selected zone and platform.

2. For Link Speed, Auto Negotiate is selected by default, which causes the connected devices to negotiate the speed and duplex mode of the Ethernet connection automatically. To force Ethernet speed and duplex, select one of the following options from Link Speed:

   For 1 Gbps Interfaces	For 10 Gbps Interfaces
   1 Gbps - Full Duplex	10 Gbps - Full Duplex
   100 Mbps - Full Duplex
   100 Mbps - Half Duplex
   10 Mbps - Full Duplex
   10 Mbps - Half Duplex

   If you select a specific Ethernet speed and duplex, you must force the connection speed and duplex from the Ethernet card to the Security Appliance as well.

3. Use Default MAC Address is selected by default. You override Use Default MAC Address for the Interface by choosing Override Default MAC Address and entering the MAC address in the field.
4. Select Shutdown Port to temporarily take this interface offline for maintenance or other reasons. If connected, the link goes down. This option is not selected by default.

   Clear the option to activate the interface and allow the link to come back up.

   You cannot shut down the management interface or the interface you are currently using.
   If you select this option, a confirmation message displays: Click OK to shut down the port.

   You can shut down the interface by clicking the Enabled icon in the Enabled column for the interface. A confirmation message displays:

   • If you click OK, the Enabled icon turns to a Disabled icon. To enable the interface, click the Disabled icon. A confirmation message displays:
   • If you click OK, the Disabled icon turns to an Enabled icon.
5. For the AppFlow feature, select Enable flow reporting to allow flow reporting on flows created for this interface. This option is selected by default.
6. Optionally, select Enable Multicast Support to allow multicast reception on this interface. This option is not selected by default.

7. Optionally, select Enable Default 802.1p CoS to tag information passing through this interface with 802.1p priority information for Quality of Service (QoS) management. This option is not selected by default.

   This option is available only for VLAN interfaces.

   Packets sent through this interface are tagged with VLAN id=0 and carry 802.1p priority information. To make use of this priority information, devices connected to this interface should support priority frames. QoS management is controlled by access rules on Policies | Rules and Policies > Access Rules.

8. Optionally, to exclude the interface from Route Advertisement, select Exclude from Route Advertisement (NSM, OSPF, BGP, RIP) This option is not selected by default.

9. Optionally, select Management Traffic Only to restrict traffic to only SonicWall management traffic and routing protocols. This option is not selected by default.

10. Optionally, if you have enabled DNS Proxy, the Enable DNS Proxy option for displays for LAN, DMZ, or WLAN interfaces. To enable DNS Proxy on the interface, select the option. This option is not selected by default.
11. Optionally, enable Asymmetric Route Support on the interface by selecting Enable Asymmetric Route Support. If enabled, the traffic initialized from this interface supports asymmetric routes, that is, the initial packet or response packet can pass through from other interfaces. This option is not selected by default.
12. If configuring a TZ series security appliance for a:
    • LAN/DMZ/WLAN interface, go to Configuring Routed Mode.
    • WAN interface, go to Step 15.

13. Optionally, select Link Aggregation or Port Redundancy from Redundant /Aggregate Ports. For more information see Configuring Link Aggregation and Port Redundancy.

14. To specify the largest packet size (MTU – maximum transmission unit) that a WAN interface can forward without fragmenting the packet, enter the size of the packets that the port receives and transmits in the Interface MTU field:

    Standard packets (default)	1500
    Jumbo frame packets	9000

    Jumbo frame support must be enabled before a port can process jumbo frames, as explained in Policies Administration. Because of the jumbo frame packet buffer size requirements, jumbo frames increase memory requirements by a factor of 4.

15. Optionally, to fragment non-VPN outbound packets larger than the interface’s MTU, select Fragment non-VPN outbound packets larger than this Interface’s MTU. This option is selected by default. When selected, the following option becomes available.

    Specify fragmentation of outbound VPN traffic in Advanced Settings.

16. Optionally, to override the Do-not-fragment packet bit, select Ignore Don’t Fragment (DF) bit. This option is not selected by default.
17. To block notification that the WAN interface can receive fragmented packets, select Do not send ICMP Fragmentation Needed for outbound packets over the Interface MTU. This option is not selected by default.
18. If configuring bandwidth management for this interface, go to Enabling Bandwidth Management on an Interface.
19. Click OK.