I have read on this board: Extreme doesn't use sub interfaces. The closest equivalent would be adding the port to the vlan tagged. Ok, Juniper firewall with subinterfaces, e.g. ge-0/0/1.3 and ge-0/0/1.110, going via trunk to port 1 on an eXtreme X67...