Nebula firewall supports virtual interface

Zyxel_Jeff

User @AHGJSoree proposes that 

• Nebula firewall can support the virtual interface feature from this post

If anyone likes this idea, please feel free to leave a comment or click vote.  

p4_greg

I agree this is a much-needed feature.

We use virtual interfaces *very* frequently when taking over a new client (we are a MSP) to switch to a new subnet with minimal disruption to the network.

Using a virtual interface with the IP of the 'old' router allows the old and new subnets to coexist seamlessly for a period of time while we get all devices/printers/etc moved to the new subnet.

Zyxel_Jeff

Hi @p4_greg

OK, many thanks for your feedback for us.

rob_k_elek

The absence of this function is causing me serious problems in migrating from the old USG 110 to the USG FLEX 500 with Nebula.

As we have multiple IP ranges on a single network interface (LAN1 / LAN 1.1) and there is no solution present in Nebula at the moment. (Having 2 groups on 2 different ports that connect to the same switch will cause a routing loop, or some other issue that crashes the device after some time.)

rob_k_elek

The absence of this function is causing me serious problems in migrating from the old USG 110 to the USG FLEX 500 with Nebula.As we have multiple IP ranges on a single network interface (LAN1 / LAN 1.1) and there is no solution present in Nebula at the moment. (Having 2 groups on 2 different ports that connect to the same switch will cause a routing loop or some other issue that crashes the device after some time.)

Zyxel_Melen

Hi @rob_k_elek,

This feature is still not supported on Nebula mode, you may consider the cloud monitoring mode.

https://community.zyxel.com/en/discussion/18540/atp-flex-how-to-set-up-nebula-monitor-mode