topic Re: Virtual Wires and Tag allowed in General Topics

Virtual Wires and Tag allowed

MP18 — Tue, 26 Feb 2019 04:23:45 GMT

We are setting up PA in v wire mode.

Say we have switch 1--- vlan tag 244,245,250----------------vwire---PA----vwire-------------------vlan tag 244,245,250 Switch2

Need to know under vwire pair for tag allowed should i leave it default that is any tag from 0 to 4094?

OR should i put vlan tag numbers 244,245 and 250 under tag allowed?

Mike

Re: Virtual Wires and Tag allowed

kiwi — Tue, 26 Feb 2019 07:52:34 GMT

Hi @MP18 ,

Can this help you :

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClqSCAS

Cheers !

-Kiwi.

Re: Virtual Wires and Tag allowed

BatD — Thu, 28 Feb 2019 08:31:30 GMT

@MP18 Not quite clear from the article, if you leave the field blank, the vwire will only allow untagged traffic.

As per article 0-4094 will allow all taggs or you can list the required tags as coma separated or specify ranges with "-". "

Re: Virtual Wires and Tag allowed

MP18 — Thu, 28 Feb 2019 18:14:54 GMT

tested with leaving field blank and it does not work.

Mean it does not allow tagged traffic is this by design?

To make it work we need to add the vlan tags

Re: Virtual Wires and Tag allowed

OtakarKlier — Thu, 28 Feb 2019 21:39:29 GMT

Hello,

Make sure you tag all vlans:

For a trunk to be passed through, allow all tags '0-4094'. [Network>Virtual Wires>Click on desired Vwire > Tag Allowed >Type in 0-4094 to allow trunked traffic.

Regards,

Re: Virtual Wires and Tag allowed

MP18 — Thu, 28 Feb 2019 22:27:19 GMT

it do not work when i allow all tags i mean if i leave

field empty does it allow all tags automatically?

or do i need to type 0-4094?

Re: Virtual Wires and Tag allowed

OtakarKlier — Thu, 28 Feb 2019 22:37:06 GMT

Yes you need to type in 0-4094.