topic Re: Does PA-500 supports interface grouping ? in General Topics

Does PA-500 supports interface grouping ?

LCMember4717 — Mon, 25 Apr 2011 09:23:47 GMT

Dears,

can i assign one IP to several interfaces ( called bgroup in juniper ) or switching interface ?

my scenario is i need to connect 2 server direclty to two port on PA-500 as DMZ and these interfaces will have single IP will be the gateway for both.. couldnt find the option under interfaces....

Re: Does PA-500 supports interface grouping ?

mharding — Mon, 25 Apr 2011 14:47:48 GMT

I think you'll have to assign the PA-500 interface in L2 mode, and then assign the IP address on the workstation/server.

You'll get a commit error if you assign two IP addresses in L3 mode since they will overlap.

Re: Does PA-500 supports interface grouping ?

kbrazil — Mon, 25 Apr 2011 15:49:32 GMT

Yep, just configure the interfaces as L2 and then create a new VLAN interface in the same VLAN as the L2 interfaces. That VLAN interface is where you will configure the IP address.

Cheers,

Kelly

Re: Does PA-500 supports interface grouping ?

jpa — Mon, 25 Apr 2011 22:37:50 GMT

Yes it does. See doc https://live.paloaltonetworks.com/docs/DOC-1618 for config details