PA500 and Avaya Switches using MLT

tuckert — Thu, 13 Feb 2014 16:08:05 GMT

I have 4 Avaya switches (A,B,C,D) that are in a MLT configuration, I need to inject a PA-500 between. Will V-wire and AE work connect the switch "A,B" to switch "C,D", A/B & C/D are stacked and each set would be considered 1 switch. AE is needed to provide more through-put.

Re: PA500 and Avaya Switches using MLT

pulukas — Fri, 14 Feb 2014 22:17:16 GMT

As I recall MLT in Avaya is an LACP based aggregation. So I believe this will work across v-wire similar to how a Cisco LAG is connected.

Assuming a two port LAG you would create two v-wire using the same two zones on each v-wire

Then you connect switch stack A/B ports to the "trust" side of v-wire 1 & v-wire 2

Then connect switch stack C/D ports to the "untrust side of v-wire 1 & v-wire 2

The switches will behave as if they are directly connected not seeing the PA.

the traffic will be visible to the PA on the v-wire interfaces and you can create your rules as in any other v-wire deploy.

You could also add more v-wire and ports as needed up to the traffic capacity of the Palo Alto.

This document describes the similar situation with Cisco switches.

Cisco Link Aggregation Traffic Through a PAN Device

topic Re: PA500 and Avaya Switches using MLT in General Topics

PA500 and Avaya Switches using MLT

Re: PA500 and Avaya Switches using MLT