topic Ethernet aggregate group in General Topics

Ethernet aggregate group

Marivi — Tue, 15 Oct 2019 07:23:44 GMT

Hello,

I have been reviewing aggregate Ethernet interface group

https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-web-interface-help/network/network-interfaces/aggregate-ethernet-ae-interface-group

and I see LACP is not enable by default, then I would like to know, How work the aggregate when you not use LACP? What is the default behavior of aggregate interface without LACP?

Thank you in advance

Regards

Marivi

Re: Ethernet aggregate group

VinceM — Tue, 15 Oct 2019 10:03:41 GMT

Hi Marivi,

By default lacp is not enable. then aggregate work like an activ/passiv aggregate.

With Lacp you can use all link in parallel.

Cheers

Re: Ethernet aggregate group

Marivi — Tue, 15 Oct 2019 10:14:38 GMT

Hello,

Vince ok, but how can we configure which interface act as active and which as passive? I could do it using LACP and configuring max port and priority. htnak you in advance.

Regards

Marivi

Re: Ethernet aggregate group

VinceM — Tue, 15 Oct 2019 10:16:41 GMT

Hi,

you can't 🙂

Re: Ethernet aggregate group

Marivi — Tue, 15 Oct 2019 10:23:51 GMT

Hello,

then for example if I have an ggregate wth 3 interfaces,

which one will act as active and which one as passive?

and what will be the behavior? the interfaces that are in passive (not ingress/egress any traffic ) will became active when ethernet in active mode fail?

Regards

Marivi

Re: Ethernet aggregate group

rmfalconer — Wed, 16 Oct 2019 17:45:41 GMT

PA firewalls use the 802.1ax standard so all interfaces in an etherchannel are active. LACP isn't required for aggregate interfaces but it does provide some features that are helpful in certain situations.

The PA doc says the traffic is load-balanced, which isn't really accurate. It's more of a load-share depending on settings.