QoS configuration based on destination (sub)interface on 3400 series

santonic — Tue, 06 Feb 2024 12:21:36 GMT

I am migrating a configuration from PA-3200 series device on PAN-OS 10.1 to PA-3410 where minimum version is 10.2. On migration I noticed error messages about destination interface in QoS configuration:

network -> qos -> interface -> ae3 -> regular-traffic -> groups -> regular-traffic-group -> members -> aaaa -> match -> local-address -> destination_interface unexpected here. Discarding.
network -> qos -> interface -> ae3 -> regular-traffic -> groups -> regular-traffic-group -> members -> bbbb -> match -> local-address -> destination_interface unexpected here. Discarding.

And on closer inspection I can see that on PAN-OS 10.1 we had an option to set destination interface for QoS configuration and in 10.2 there isn't such option.

Was this option omitted in PAN-OS 10.2? Is it platform specific? Though 3400 should support everything 3200 does and more. Or is it maybe some sort of a bug?

Re: QoS configuration based on destination (sub)interface on 3400 series

reaper — Tue, 06 Feb 2024 13:00:36 GMT

This feature is supported on PA-3200 Series, PA-5200 Series, PA-5400 Series, PA-7000 Series only (check the help files from the QoS menu)

Re: QoS configuration based on destination (sub)interface on 3400 series

santonic — Tue, 06 Feb 2024 13:22:14 GMT

Thank you very much. Wasn't expecting that something which is supported on 3200 series wouldn't be supported on 3400.

topic Re: QoS configuration based on destination (sub)interface on 3400 series in Next-Generation Firewall Discussions

QoS configuration based on destination (sub)interface on 3400 series

Re: QoS configuration based on destination (sub)interface on 3400 series

Re: QoS configuration based on destination (sub)interface on 3400 series