topic Aggregate Interface with sub-interface in General Topics

Aggregate Interface with sub-interface

Shadow — Sun, 08 Jan 2023 13:08:52 GMT

Dear all,

I am designing a new network for a client and they have lots of zones. my idea is to create an aggregate interface (ae1) and create sub-interfaces for the individual zone.

I read aggregate interface can be done on SD-WAN level and could not find any documents related to my design (Not SD-WAN). However, I found this post

https://live.paloaltonetworks.com/t5/general-topics/transitioning-from-a-physical-interface-with-sub-interfaces-to/m-p/439278#M99809.

can someone confirm it could be done which I am after? this is green field design

thank in advance

Re: Aggregate Interface with sub-interface

Metgatz — Sun, 08 Jan 2023 21:09:05 GMT

Hello @Shadow

It is fully supported by Palo Alto to create Portchannel/Aggregate Ethernet LACP and use L3 or L3 subinterfaces, with their corresponding VLAN TAG without SDWAN.

Cheks this links:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/network/network-interfaces/aggregate-ethernet-ae-interface-group

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/network/network-interfaces/aggregate-ethernet-ae-interface

https://techbast.com/2021/04/palo-alto-networks-how-to-config-link-aggregation.html

https://weberblog.net/palo-alto-aggregate-interface-w-lacp/#:~:text=%5BOptional%5D%20Configure%20subinterfaces%20within%20the%20aggregate%20group.

Cheers

Re: Aggregate Interface with sub-interface

Shadow — Mon, 09 Jan 2023 09:08:23 GMT

Hello Metgaz,

thank you for your time & for the last two links as well.