PA 5050 Aggregate Interfaces

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

PA 5050 Aggregate Interfaces

L1 Bithead

Hi

I have conffigured Aggregate Interface "ae1" in PA 5050 which is connected to the Cisco Nexus 7k Switch. Bothe the Physical interfaces(eth1/21 and eth1/22 , both TenGig Interfaces) are showing up but the aggregate interface ae1 is howing down in the GUI. I am not able to ping the nexus core switch. As per the specification sheet of PA 5000 , it supports 802.1ad i.e LACP. Do i need to configure some more setting so as to make it up?

Please advice.

Regards

7 REPLIES 7

L3 Networker

hello,

are you sure that LACP is supported??? I do the same install with STATIC ETHERCHANNEL

Yes as per the specification sheet of PA 5050 802.1ad (i,e LACP ) is supported . Do you mean that I have to configure static etherchannel with mode on?

Hello,

I'm sorry but 802.1ad doesn't automatically included LACP.

You can see LACP as an add-on to 802.1ad which allows to negotiate a channel dynamically between 802.1ad 'neighbors'

Unfortunately at this moment the PA firewalls don't support LACP and you'll need to define static interface bonding.

I would presume it's possible to have this feature added in some future release, but only PAN can say for sure.

Try look at these tips regarding aggregating interfaces between PAN and Cisco (among others):

https://live.paloaltonetworks.com/message/6449#6449

https://live.paloaltonetworks.com/message/7098#7098

L5 Sessionator

Hi All,

Just to clarify, LACP is not supported in Layer 3 mode.

You can pass LACP through the Palo Alto device if it's running in v-wire mode, but that is it as of now.

Thanks,

Jason Seals

thanks jason for these precision! do you know if the next version will be support LACP with L3

Hi Alle,

I haven't heard anything of the such. However, I'm usually not the first to hear of things coming in the newer releases. The best person to talk with concerning future releases is your Palo Alto Sales Engineer. If you don't know who your assigned SE is, you can call in and speak with the sales team.

Thanks,

Jason Seals

  • 4099 Views
  • 7 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!