topic Re: Palo Alto LACP to Nexus in General Topics

Palo Alto LACP to Nexus

VicAcebedo — Fri, 18 Sep 2020 16:38:20 GMT

Hi all,

I have an upcoming deployment and I need your inputs here. I will be replacing a fire that is configured in HA Pair with a PA-3220 non HA pair.

The core switch of the client is configured as a active-passive (NX-OS). My concern is, can I enable LACP on Palo Alto side and make it a routed interface and assign IP to it and on the nexus side they will configure a VPC, make it a L3 and configured an IP on it so on the Palo Alto side, it appears only as 1 appliance?

Your inputs are highly appreciated. Thanks a lot.

Re: Palo Alto LACP to Nexus

Rene_Boehme — Sat, 19 Sep 2020 20:04:56 GMT

Hi,

well that descibes perfectly what vPC is. See both devices do support LACP and the Nexus is designed to behave like this. So you are very good to go with this solution. If, in this scenario, it is necessary for us to understand why you switch from HA-pair to 2-single-firewalls, please clarify.

Re: Palo Alto LACP to Nexus

VicAcebedo — Tue, 29 Sep 2020 00:07:55 GMT

Because the end user only purchase 1 firewall