Can a Sub-Interface be Shutdown or Disabled?
58983
Created On 09/25/18 20:36 PM - Last Modified 06/12/23 20:57 PM
Resolution
The Palo Alto Networks firewall does not currently have a direct option for shutting down a sub-interface, as it is logical in nature.
As a workaround, select "none" for the sub-interface zone or "none" for the virtual router, or both. This will effectively disable ingress/egress traffic on the sub-interface.
owner: pvemuri