Example: Configuring a WAN Interface (NSM Procedure)
Multilink Frame Relay (MLFR) for a user-to-network interface (UNI) on available devices allow for the creation of one or more permanent virtual circuits (PVCs) within the bundle. You create a PVC by configuring a subinterface to the multilink interface. Each subinterface maps to a PVC, which is identified by a data-link connection identifier (DLCI). Note that each PVC can be associated with a separate security zone; the security zone for each PVC can be different from the security zone assigned to the multilink interface.
In this example, you create a subinterface for the multilink interface and assign it to a security zone. Then assign a Frame Relay DLCI and IP address to the subinterface.
To configure a WAN interface:
On an SSG520 device running ScreenOS 5.1, add a multilink interface and assign it to the Trust zone.
Add and configure a WAN subinterface:
In the device navigation tree, select Network > Interface.
Click the Add icon and select WAN-Sub Interface. The General Properties screen appears.
Configure the following options, and then click OK:
For Name, select the multilink interface that you want to assign the subinterface to. The subinterface name consists of the multilink interface name and a subinterface number. For example, if the multilink interface name is ml1, its subinterfaces can be ml1.1 and ml1.2
For Zone, select Trust.
Click OK to save your changes to the device.