topic Layer 2 Palo Alto to 802.1q subinterface on Cisco ISR in General Topics

Layer 2 Palo Alto to 802.1q subinterface on Cisco ISR

MichaelMedwid — Wed, 05 Feb 2020 21:44:01 GMT

I am thinking to put a small pan between an Internet connected Cisco 4331 ISR and a Meraki switch. Will the PAN just pass all the tagged frames along and will the PAN be able to process the traffic from all those VLANs/tagged frames? Or would I need to configure VLANs on the PAN?

[Cisco ISR 4331]-Int Gi0/0 0/0.1 0/0.2 0/0/3------[L2 PAN]-----------802.1q Trunk[Meraki 225]

Re: Layer 2 Palo Alto to 802.1q subinterface on Cisco ISR

OtakarKlier — Wed, 05 Feb 2020 23:24:22 GMT

Hello,

Its better to either use v-wire or a Layer3 interface. I think you would like little disruption to your design so vwire is probably the best way to go.

Here is some information overload ;).

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClS2CAK

https://live.paloaltonetworks.com/t5/Blogs/Getting-Started-Palo-Alto-Networks-Firewall-Series/ba-p/67707

Cheers!