topic Re: Lacp Issues Peer Not Detected in Next-Generation Firewall Discussions

Lacp Issues Peer Not Detected

Thomasevig — Thu, 02 Mar 2023 12:50:48 GMT

Hello Dear Forum.

we are running 2 pa-3320 in Ha Actiave/passive mode

both of which have aggregated ports.

recently we've moved our server room to a different room and

have reconfigured some of out network components.

after reconnecting everything in

the correct order,

the passive unit can't reach our

DC Servers.

the ae1 link seems to be down despite the arp

table of the interface is properly populated.

pinging some devices across these networks

from the passive unit does work.

however it cant reach some specific resources,

such as the DC servers (as mentioned before).

on the ae1 link it is shown as if the Ethernet

interfaces are down(despite not being down1!)

and indicates that

"Peer is not detected"

Pictures Included!!

Many thanks!

Re: Lacp Issues Peer Not Detected

Raido_Rattameister — Thu, 02 Mar 2023 13:30:16 GMT

If you take packet capture (Monitor > Packet Capture) on interface 1, 2, 5 and 7) do you see incoming LACP packets being sent by switch?

What LLDP shows as peer port? Is physical cabling going where it is supposed to go?

Re: Lacp Issues Peer Not Detected

Thomasevig — Thu, 02 Mar 2023 14:16:58 GMT

Hello thank you.

the lldp peers show no switches on the passive unit.

im trying to figure it out thank you for now

Re: Lacp Issues Peer Not Detected

Thomasevig — Wed, 15 Mar 2023 10:11:24 GMT

Hello,

for some reason the aggregation link on the switch

which it's connected to, didn't work in dynamic link.

this makes me wonder, can the palo alto use lacp

to a switch wihthout having to configure dynamic

lacp on the switch itself?

Re: Lacp Issues Peer Not Detected

nikoolayy1 — Thu, 23 Mar 2023 07:24:18 GMT

You can just not enable LACP under the config and this will make it a static trunk:

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/configure-interfaces/configure-an-aggregate-interface-group

Other than that this command "show lacp aggregate-ethernet all" will give you a lot of needed info. Check the link below:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PNgNCAW

Just in case check if the configured transmit rate is the same between the switch and Palo alto (Slow or Fast):

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClWbCAK

Re: Lacp Issues Peer Not Detected

M.Allen — Thu, 13 Jun 2024 06:25:02 GMT

Hi did you ever get a resolution to this I have a very similar issue?