topic Re: PA 5050 Aggregate Interfaces in General Topics

PA 5050 Aggregate Interfaces

itsecll — Wed, 21 Mar 2012 12:46:32 GMT

I have conffigured Aggregate Interface "ae1" in PA 5050 which is connected to the Cisco Nexus 7k Switch. Bothe the Physical interfaces(eth1/21 and eth1/22 , both TenGig Interfaces) are showing up but the aggregate interface ae1 is howing down in the GUI. I am not able to ping the nexus core switch. As per the specification sheet of PA 5000 , it supports 802.1ad i.e LACP. Do i need to configure some more setting so as to make it up?

Please advice.

Regards

Re: PA 5050 Aggregate Interfaces

alle — Wed, 21 Mar 2012 14:01:23 GMT

hello,

are you sure that LACP is supported??? I do the same install with STATIC ETHERCHANNEL

Re: PA 5050 Aggregate Interfaces

itsecll — Wed, 21 Mar 2012 14:22:10 GMT

Yes as per the specification sheet of PA 5050 802.1ad (i,e LACP ) is supported . Do you mean that I have to configure static etherchannel with mode on?

Re: PA 5050 Aggregate Interfaces

KP — Wed, 21 Mar 2012 15:35:41 GMT

Hello,

I'm sorry but 802.1ad doesn't automatically included LACP.

You can see LACP as an add-on to 802.1ad which allows to negotiate a channel dynamically between 802.1ad 'neighbors'

Unfortunately at this moment the PA firewalls don't support LACP and you'll need to define static interface bonding.

I would presume it's possible to have this feature added in some future release, but only PAN can say for sure.

Re: PA 5050 Aggregate Interfaces

mikand — Wed, 21 Mar 2012 19:48:24 GMT

Try look at these tips regarding aggregating interfaces between PAN and Cisco (among others):

https://live.paloaltonetworks.com/message/6449#6449

https://live.paloaltonetworks.com/message/7098#7098

Re: PA 5050 Aggregate Interfaces

jseals — Sun, 25 Mar 2012 04:12:20 GMT

Hi All,

Just to clarify, LACP is not supported in Layer 3 mode.

You can pass LACP through the Palo Alto device if it's running in v-wire mode, but that is it as of now.

Thanks,

Jason Seals

Re: PA 5050 Aggregate Interfaces

alle — Mon, 26 Mar 2012 08:10:52 GMT

thanks jason for these precision! do you know if the next version will be support LACP with L3

Re: PA 5050 Aggregate Interfaces

jseals — Mon, 26 Mar 2012 17:09:23 GMT

Hi Alle,

I haven't heard anything of the such. However, I'm usually not the first to hear of things coming in the newer releases. The best person to talk with concerning future releases is your Palo Alto Sales Engineer. If you don't know who your assigned SE is, you can call in and speak with the sales team.

Thanks,

Jason Seals