topic Re: PA-220 Aggregate Interface with LACP supported? in General Topics

PA-220 Aggregate Interface with LACP supported?

R.Borgmaster — Tue, 13 Jun 2017 08:51:47 GMT

Hi,

I need to confirm whether the PA-220 is able to aggregate 2 interfaces or more in a LAG (LACP).

I was able to find out that the PA-200 does not support aggregating interfaces with LACP, but the PA-220 is rather new and I have not been able to find a definitive statement about it. The product comparison indicates that it should be suported on up to four interfaces. Meanwhile the datasheet does not list LACP support.

Product comparison:

https://www.paloaltonetworks.com/products/product-comparison.html?chosen=pa-220,pa-200

PA-220 datasheet:

https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resources/datasheets/pa-220-specsheet

Re: PA-220 Aggregate Interface with LACP supported?

BPry — Tue, 13 Jun 2017 14:46:20 GMT

@R.Borgmaster,

I'm not positive but I'm also actually pretty interested to know the answer. I'll ask one of the hardware guys here at ignite17 today to let you know what I find out if someone else doesn't answer your question before then.

Re: PA-220 Aggregate Interface with LACP supported?

PAN-Expert — Thu, 15 Jun 2017 14:26:00 GMT

@R.Borgmaster,

It is possible to aggregate them using LACP I have done that and it works well.

Re: PA-220 Aggregate Interface with LACP supported?

BPry — Thu, 15 Jun 2017 16:30:19 GMT

@R.Borgmaster,

I forgot to update this and I thought the hardware guy that I talked to said he would post about it. @PAN-Expert is correct and I've verified it with one of the hardware guys at Ignite17, this will function perfectly fine and is fully supported.

Re: PA-220 Aggregate Interface with LACP supported?

PAN-Expert — Thu, 15 Jun 2017 17:10:30 GMT

@R.Borgmaster,

Let me know if you need any parts of the configuration from the PA-220 for LACP.

Re: PA-220 Aggregate Interface with LACP supported?

R.Borgmaster — Fri, 16 Jun 2017 09:18:25 GMT

Thank you both! I have no need to implement this at this stage. I only needed to confirm whether it was an actual feasible option to at all list it in an internal decision meeting.

Re: PA-220 Aggregate Interface with LACP supported?

BPry — Fri, 16 Jun 2017 12:09:57 GMT

@PAN-Expert,

Out of curiosity, because it was something that we were talking about when I was chatting with the hardware engineer, what was your use case for actually using Aggregated LACP interfaces on a PA-220? The only use cases that we could come up with were better answered by PBF considering the devices throughput limitations.

Re: PA-220 Aggregate Interface with LACP supported?

R.Borgmaster — Fri, 16 Jun 2017 14:12:56 GMT

The objective would in that case have been to provide maximal availability. Terminating the LAG over both switches in the below (distributed LAG) would tolerate a switch loss without even triggering a PA FW failover, and could also even tolerate that one switch is down in combination with that also one PA FW is down.

Re: PA-220 Aggregate Interface with LACP supported?

Remo — Sat, 17 Jun 2017 09:20:55 GMT

FYI: Probably not that important on a PA-220 but LACP prenegotiation is not supported on this platform (the same as with the PA-800 series)