topic Re: Matrix/discussion of capability with the differing interface deployment modes in General Topics

Matrix/discussion of capability with the differing interface deployment modes

mpgioia — Fri, 05 Aug 2016 03:30:52 GMT

Is there a discussion or KB article that discusses a matrix/capability of the differing interface deployment modes.

I.e., Layer2's pros and cons, Vwire's pros and cons, etc.

Re: Matrix/discussion of capability with the differing interface deployment modes

reaper — Fri, 05 Aug 2016 13:11:29 GMT

there is one now 🙂

there's a section in the Admin guide that shortly describes all types of interfaces: Interface Deployments

any specific differences you are looking for ? let me try to list a few (for layer 2 interfaces, there is a layer3 config you can enable for the layer3 functionality so it's not strictly _on_ layer2, it does add the support to the layer2)

supports:	vwire	layer2	layer3	tap
vlan tags	y	y	y	y
tagged subinterfaces	y	y	y	n
untagged subinterfaces	n	n	y	n
minimum physical interfaces	2/vwire	1	1	1/tap
maximum physical interfaces	2/vwire	all	all	all
routing	n	y	y	n
nat	y	y	y	n
wirespeed/SPPP	y	y	y	y
qos	y	y	y	n
dhcp	n	y	y	n
ssl decryption	y	y	y	y-inbound n-outbound
Captive Portal	y	y	y	n
policy based forwarding	n	y	y	n

Re: Matrix/discussion of capability with the differing interface deployment modes

mpgioia — Fri, 05 Aug 2016 12:04:46 GMT

That is literally what I was after.. a matrix like that...
PAN reps should publish this as a KB. Brilliant ! & Thankyou.

Re: Matrix/discussion of capability with the differing interface deployment modes

Anon1 — Wed, 10 Aug 2016 12:00:15 GMT

Hello,

the design guide describes the different deployment modes with their advantages / disadvantages:

https://live.paloaltonetworks.com/t5/Integration-Articles/Designing-Networks-with-Palo-Alto-Networks-Firewalls/ta-p/60868