topic I need configuration help In vwire mode ,.... in General Topics

I need configuration help In vwire mode ,....

Gururaj — Fri, 04 Jan 2013 09:43:38 GMT

Hi All,..

Kindly refer the fallowing topology, in which VLANs (ex:10 VLANs) are created and any traffic to internet is routed to the core firewall. In between core switch and firewall i have connected PaloAlto firewall in VWire mode and also have defined the policy to allow traffic. Did i need to define any VLANs in PaloAlto? Because i am not able to see any packet hits on PaloAlto when connected ( Ping is not happening between core switch to core firewall),..

Is any extra configuration is required in multiple VLAN scenario ?

Device Description : Model-2050, PAN-OS: 5.0.0

Thank you

Gururaj

Scenario:

Re: I need configuration help In vwire mode ,....

kdd — Fri, 04 Jan 2013 13:04:53 GMT

Hi Gururaj,

for using virtualwire-mode the interface of the core firewall and the switch should have no

(in case of access-port) or only one and then the same vlan-tag (trunk-interface).

Best regards

Klaus

Re: I need configuration help In vwire mode ,....

sdurga — Fri, 04 Jan 2013 16:39:05 GMT

I assume that the link between the core switch and the core firewall is a trunk port in that case multiple vlan traffic will pass through Paloalto V-wire. For allowing tagged traffic trough vwire you have to do the following config as below. Below u can see my vwire allows vlan traffic 1-8 by default this is set to 0 which means untagged traffic .