topic Re: PA-3020 - Internet Connection over Cisco Switch in General Topics

PA-3020 - Internet Connection over Cisco Switch

MPI-AE — Mon, 08 May 2017 08:55:48 GMT

Hey guys,

at the moment, there is a direct connection between my Palo Alto Firewall and the Internet Router.

Ethernet 1/20 on the PA is my external interface - it's one of the fiber interfaces.

I want to change this connection from "direct" to "over switch".

My question is: Which SFP module do I need in the cisco switch?

I mean, the PA interface is a 1Gb interface. So perhaps SFP-1GBase-SR?

Is there a possibility to see the sfp type of the interface of the Palo Alto?

I did some research on the web but didn't make a find yet.

Thanks for help!

Jacopo_Vigano — Mon, 08 May 2017 09:34:40 GMT

to see the hardware SFP connected into ethernet1/20 on your PA-3020 type this command via CLI:

>show system state filter sys.s1.p20.phy

Let me know.

Jacopo

MPI-AE — Mon, 08 May 2017 10:25:15 GMT

Oh yeah, that's it! Thanks!

It's 1000B-SX.

So if I use a Cisco 1000BASE-SX GBIC module, everything should work fine?

Or are there some traps?

Jacopo_Vigano — Mon, 08 May 2017 11:30:47 GMT

Yes, 1000B-SX Gbic should works fine.

Jacopo