WEBVTT 00:07.920 --> 00:20.220 There are times when you only need to link to physical interfaces together to link them into one broadcast 00:20.220 --> 00:31.820 domain the most used scenario is when your 48 connects the internal network and your ISP router. 00:31.830 --> 00:35.450 This can happen in a transparent mode. 00:35.490 --> 00:38.140 Virtual wire here. 00:38.370 --> 00:47.520 If you configure a virtual wire pair you're actually linking those two ports as if they were connected 00:47.520 --> 00:49.800 using a cable. 00:49.830 --> 00:57.020 No traffic will be captured between those only two interfaces. 00:57.090 --> 01:03.420 We usually do with using an external interface and an internal interface. 01:03.420 --> 01:13.020 The steps to do it is to link those to court members and to configure a policy that will allow traffic 01:13.270 --> 01:14.800 in both sides. 01:15.840 --> 01:18.430 Let's do it. 01:18.620 --> 01:26.960 All right so let's move over to our network interfaces and let's decide that only the traffic that is 01:26.960 --> 01:35.540 coming from internal 8 interface from the network that is connected to internal 8 interface will flow 01:35.540 --> 01:40.800 over to our when one interface and to the Internet. 01:40.880 --> 01:48.800 We can also decide that only traffic that will flow from internal aid will move over to internal 9 so 01:48.800 --> 01:54.100 we can link to different networks on our 40 gig. 01:54.590 --> 01:58.640 So let's create a new virtual wire here. 01:58.730 --> 02:00.620 Let's name it. 02:00.800 --> 02:02.990 Internet access 02:07.350 --> 02:08.110 all right. 02:08.130 --> 02:11.200 So let's call it on the Internet. 02:11.730 --> 02:19.470 And in terms of FA interface members will choose when one and internal eight. 02:19.560 --> 02:28.640 Now if we enable wildcard on the policy that we will configure later on will apply also to the virtual 02:28.640 --> 02:36.230 lines not only to the physical ports but we will disable it for right now because we don't have any 02:36.710 --> 02:40.190 violence attached to those interfaces. 02:40.500 --> 02:49.030 Okay once created you will head over to policy and objects IP before virtual wire per policy. 02:49.030 --> 02:59.020 That's a new policy selection that was made after you have created your virtual wire pair create new 03:00.650 --> 03:11.000 name your policy decide whether it will be only a one way that is from when 1 2 internal 8 or the other 03:11.000 --> 03:14.980 way or two way direction. 03:15.110 --> 03:19.230 Source anyone can use it. 03:19.390 --> 03:24.340 Destination what ever destination is needed. 03:24.490 --> 03:28.110 Service all. 03:28.280 --> 03:35.330 And if you wish to apply any security profile you can do it.