Separating interfaces into vdoms just to keep them separate is not
necessary. A firewall will not allow traffic from one interface to
another unless there is a policy or unless they are in a zone or switch
together (and even then this isn’t necessari...