The following is a list of limits to consider when using sub-interfaces:
It is perfectly acceptable to use both VLAN and CIDR sub-interfaces on a single Sensor. As we have seen, however, you cannot mix VLAN and CIDR sub-interfaces on a single interface.
Trellix IPS supports VLAN IDs 1 through 4095.