Trunk Vs physical port

[The_guroo_2]

                   Guys can someone plz tell me what is the difference between using subinterface and physical interface for example if i have four DMZ and i take ether1 and then subdivide them in four and trunk it to the swicth (with port channel)....th eother scenario is that i take each physical link and make seprate DMZ (apart from redudnacy) what is the difference and what does cisco recommends or what is teh security say on this guy plz jhelp as cant get my head around

[varrao]

Hi Guroo,

As such there are no specific recommendations, it all depends on your requirements, if you have 4 vacant ports available and do not have any future requirements then you can use individual physical ports, but if you have any issues, then you can easily make 4 sub-interfaces on the ASA physical port, just make sure not to use that physical ports to pass the traffic.

Thanks,
Varun Rao
Security Team,
Cisco TAC