When an ethernet interface is configured with an IPv4 address, which type of zone is it a member of?

An Ethernet interface configured with an IPv4 address functions at Layer 3 of the OSI model, enabling routing capabilities. Such an interface must be assigned to a Layer 3 zone to apply security policies and participate in routing.

Virtual Wire zones are used for interfaces configured in Virtual Wire mode, which is a transparent Layer 2 deployment that does not involve IP addressing on the firewall interface itself.

Tap zones are used for interfaces in Tap mode, which passively monitors traffic without participating in the data path, and thus do not typically have an IPv4 address configured on the interface.

Tunnel zones are specifically used for interfaces that terminate VPN tunnels (like IPSec or GRE), not for standard Ethernet interfaces configured with an IPv4 address for general routing.