topic Re: LACP Aggregate Group with Subinterface in General Topics

LACP Aggregate Group with Subinterface

adrianflux — Wed, 16 Aug 2017 08:46:31 GMT

Hi everyone,

I'm trying to set-up a Subinterface on a Aggregate group with LACP on a PA-3020 and a DELL 6248 switch in a test envoirment.

If I assign an IP on the default VLAN to the Aggregate Group everything works but I can't seem to get the Subinterface to work, I've tested a Subinterface on a standard interface which also worked.

Below is the switch config for the 4 LACP ports, however I think the LACP side of things must be configured correctly for the Aggregate group to work when I assign it an IP?

Thank-you,

Kevin.

interface ethernet 1/g1
channel-group 1 mode auto
switchport mode trunk
switchport trunk allowed vlan add 1,180,200
exit
!
interface ethernet 1/g2
channel-group 1 mode auto
switchport mode trunk
switchport trunk allowed vlan add 1,180,200
exit
!
interface ethernet 1/g3
channel-group 1 mode auto
switchport mode trunk
switchport trunk allowed vlan add 1,180,200
exit
!
interface ethernet 1/g4
channel-group 1 mode auto
switchport mode trunk
switchport trunk allowed vlan add 1,180,200
exit
!

Re: LACP Aggregate Group with Subinterface

reaper — Wed, 16 Aug 2017 09:07:27 GMT

Hi Kevin

Did you set the subinterface tag to match with the VLAN ID in the trunk?

Re: LACP Aggregate Group with Subinterface

adrianflux — Wed, 16 Aug 2017 09:57:01 GMT

Hi,

Yep, I set the tag to match, I've setup the Subinterface for the Aggregate group with the same settings I've tested on the Subinterface of the normal interface, interface1/7.180

It's a bit odd, I was expecting it to just work.

Re: LACP Aggregate Group with Subinterface

reaper — Wed, 16 Aug 2017 11:30:18 GMT

You didn't set an IP address on the subinterface

Since this is a layer3 interface it requires an IP address.

If you want it to behave as a switched interface, you need to set the aggregate as a layer2 interface and then add a vlan with layer3 functionality

Re: LACP Aggregate Group with Subinterface

adrianflux — Wed, 16 Aug 2017 14:36:01 GMT

Hi,

Thanks for helping me with this!

I did have an IP set on the subinterface, it's displayed at the bottom of the screenshot.

I'd like the Palo to do the routing for the layer2 switches.

I've now changed ae1 to layer2. I seem to be only able to add one VLAN per interface, so am I right in thinking I need to create a layer2 subinterface for each VLAN?

Do I then create a VLAN interface for each VLAN?

I've done the above but still no luck.

Thanks again for your help.

Kevin.

Re: LACP Aggregate Group with Subinterface

Remo — Wed, 16 Aug 2017 16:17:52 GMT

Dumb question but did you create the layer 2 vlan on the switch or did you only allow them on the trunk?

Re: LACP Aggregate Group with Subinterface

adrianflux — Thu, 17 Aug 2017 06:32:24 GMT

On the switch I have created the 180 VLAN, set-up an access port on VLAN 180 which I've plugged a test machine into and added the VLAN to the LACP trunk ports.

Re: LACP Aggregate Group with Subinterface

Remo — Thu, 17 Aug 2017 06:45:33 GMT

Ok. On your screenshots the AE seems to be up (->green icon), but is the LACP channel also up? What LACP settings do you have on the PA?

Is the spanning tree status "forwarding" on your switch in VLAN 180?

Re: LACP Aggregate Group with Subinterface

jcoyle2 — Mon, 17 Apr 2023 20:11:18 GMT

I'm having the same issue, did you ever get this resolved?

Re: LACP Aggregate Group with Subinterface

Remo — Sun, 27 Aug 2023 18:41:29 GMT

@jcoyle2 what exactly was your issue and were you able to solve it?