Palo Alto and Cisco LACP configuration

Alex_Irigoyen — Fri, 21 Jul 2017 16:51:37 GMT

We are having a problem setting up a port channel/aggregated ethernet interface using two 1 gig connections between our Palo Alto (model 5020, PAN-OS 8.0) and a Cisco switch (model WS-C3750G-24T (IOS: 12.2(55)SE1). We have worked with TAC but can't seem to get this issue resolved.

(Most of the articles concerning lacp with PAN and cisco connections are pretty dated)

Re: Palo Alto and Cisco LACP configuration

ImBatman — Fri, 21 Jul 2017 17:42:13 GMT

On the 3750 etherchannel, are you using ACTIVE, PASSIVE or ON (ie - channel-group 1 mode active)? Also, what packet distribution algorithm are you using on the 3750? Your options are dst-ip | dst-mac | src-dst-ip | src-dst-mac | src-ip | src-mac. I've done a lot of etherchannel work with the 3750 platform. Usually if you are "really" using LACP, you should be running your etherchannel with ACTIVE/SRC-DST-IP. There are scenarios (ie - old school ESXi) where you are forced to use "ON". One last word of advice. The 3750's are finicky. You should put your configs in the port-channel and let them trickly down to the interfaces. If everything doesn't match exactly, it may not work.

topic Re: Palo Alto and Cisco LACP configuration in General Topics

Palo Alto and Cisco LACP configuration

Re: Palo Alto and Cisco LACP configuration