PA-5450 MGT-A and MGT-B Management Ports configuration

szabo_sandor — Thu, 27 Oct 2022 19:22:04 GMT

Based on the PA-5400 MPC Component Descriptions, the MGT-A and MGT-B management ports are bundled by default as a LAG:

"Two SFP/SFP+ management ports providing 1/10GE connectivity that are used to access the management interface. MGT-A and MGT-B are bundled by default as a LAG (link aggregation group). To leverage both ports, they must be connected to a LAG aware switch." (source)

In comparison, this is all we see on the CLI output, it seems to us that the dedicated logging interfaces are bonded (bond1), but it doesn't show this for management interfaces; we can't find any reference in the documentation to the above operation, does anyone know how the two MGT ports of the PA-5450 actually work, how to configure the two MGT ports on the PA-5450?

Hostname> show interface management

-------------------------------------------------------------------------------
Name: Management Interface
Link status:
  Runtime link speed/duplex/state: unknown/unknown/down
  Configured link speed/duplex/state: auto/auto/auto
MAC address:
  Port MAC address 94:56:xx:xx:xx:ea
Ip address: x.x.x.x
Netmask: 255.255.255.128
Default gateway: x.x.x.x
Ipv6 address: unknown
Ipv6 link local address: unknown
Ipv6 default gateway:
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Logical interface counters:
-------------------------------------------------------------------------------
bytes received                    0
bytes transmitted                 578
packets received                  0
packets transmitted               7
receive errors                    0
transmit errors                   0
receive packets dropped           0
transmit packets dropped          0
multicast packets received        0
-------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Logging Interface bond1 and slave interfaces eth6 and eth7 stats:
--------------------------------------------------------------------------------
bond1: flags=5123<UP,BROADCAST,MASTER,MULTICAST>  mtu 1500
        ether 94:56:xx:xx:xx:ec  txqueuelen 1000  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

eth6: flags=6147<UP,BROADCAST,SLAVE,MULTICAST>  mtu 1500
        ether 94:56:xx:xx:xx:ec  txqueuelen 1000  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

eth7: flags=6147<UP,BROADCAST,SLAVE,MULTICAST>  mtu 1500
        ether 94:56:xx:xx:xx:ec  txqueuelen 1000  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Re: PA-5450 MGT-A and MGT-B Management Ports configuration

JoshuaDominguez — Thu, 25 Apr 2024 14:39:15 GMT

@szabo_sandor - how did this effort end up?

Re: PA-5450 MGT-A and MGT-B Management Ports configuration

PktBlocker — Fri, 01 May 2026 14:51:35 GMT

For as much money as these firewalls cost you would think that there would be a command to see if the transceiver is working in each port. ☹️

topic PA-5450 MGT-A and MGT-B Management Ports configuration in Next-Generation Firewall Discussions

PA-5450 MGT-A and MGT-B Management Ports configuration

Re: PA-5450 MGT-A and MGT-B Management Ports configuration

Re: PA-5450 MGT-A and MGT-B Management Ports configuration