topic Re: V-Wire Mode with trunk in General Topics

V-Wire Mode with trunk

Harshit — Tue, 05 Aug 2014 18:56:17 GMT

Hey Guys,

i am about to deploy PaloAlto 5020 in a v-wire mode with trunk on them, does any one has any known issues that i may encounter

here is the topology

Current: switch ====(trunk)===== cisco firewall

new: switch======(trunk)=====PaloAlto (vwire)=====(trunk)====Cisco firewall.

Any help would be appreciated.

Regards,

~Harry

Re: V-Wire Mode with trunk

HULK — Tue, 05 Aug 2014 20:04:54 GMT

Hello Harshit,

Few related information for you:

Cisco Link Aggregation Traffic Through a PAN Device

Which Link Aggregation Protocols are Supported?

LACP LAG

LACP support

Hope this helps.

Thanks

Re: V-Wire Mode with trunk

pulukas — Tue, 05 Aug 2014 21:52:06 GMT

I setup v-wire with q tag trunk ports on the 5000 series for a data center deployment.

this can be as simple as outlined in this document. Where there is only two zones and all tags are just permitted through the v-wire.

Trunked Traffic in a V-Wire

If you want more control, you can create a subinterface for each q tag on the v-wire. These can then be placed onto their own v-wire pipe and assigned zones separately from the other q tags on the trunk port. This also prevents the automatic passing of additional tagged frames on the trunk without the explicit configuration of the sub-interface and v-wire pair.

Create the v-wire for the tag
Create the sub-interface on both physical interfaces and assign the tag and the v-wire
Assign each side of the v-wire to the desired zones
Rules will then apply by zone assignment of the particular v-wire pairs