topic LACP and Virtual-Wire in Integration Discussions

LACP and Virtual-Wire

MHafiz10i — Sun, 18 Jul 2021 14:40:03 GMT

Hi All,

I'm planning to configure the PAN 850 with LACP aggregation to Cisco NEXUS 9K with a transparent mode between the NEXUS

switch and router.

Is it possible to configure the LACP group interface with the interface towards router as one virtual-wire?

If possible, how we can do that. I already tried, however the LACP interfaces is is always "Suspended"

Re: LACP and Virtual-Wire

mgwozdz — Fri, 04 Feb 2022 13:58:34 GMT

I would also like to know the answer for that question.

Paloalto says its possible, but my LACP status is suspended.

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/networking/configure-interfaces/virtual-wire-interfaces/aggregated-interfaces-for-a-virtual-wire.html

Re: LACP and Virtual-Wire

mlinsemier — Fri, 04 Feb 2022 19:09:23 GMT

Five or so years ago we used Virtual Wire in-between our 5ks and Palo Alto firewalls. To complicate matters, we were also using Virtual Wire in-between Nexus VPCs. In this configuration we had traffic issues any time we performed manual failovers or experienced hardware outages on the Palo Alto or the Nexus infrastructure. Granted this was some time ago and was 7.x code so many things have changed.

This being said we are now doing full LACP L3 (regular port channels) with the Palo Alto doing core routing and have no issues (PAN OS 10.1.4) with HA failovers. These settings may or may not apply to Virtual Wire, but In the L3 configuration you need to make sure you have LACP configured and in Fast Failover.

On the Nexus side you will want do do the following:

Port Channel:

interface port-channelxx

no lacp suspend-individual

Ports in Port Channel:

Interface ethernetx/x

lacp rate fast

Hope this helps,

Matt

Re: LACP and Virtual-Wire

mgwozdz — Fri, 04 Feb 2022 21:57:36 GMT

Actually im using Dell Swtiches S5248F-ON with OS10.

We are using VLT which is similiar to VPC.

But still no luck on aggregated virtual wire ports.

Does that virtual wire with aggregated ports even works ?