topic Re: Cisco - trunk- PA - trunk - Juniper SRX in General Topics

Cisco - trunk- PA - trunk - Juniper SRX

Ulugbekyu — Wed, 29 May 2013 16:10:31 GMT

Cisco - trunk- PA - trunk - Juniper SRX

Please help to configure PA-2050 for trunk ports between cisco and juniper.

Which type of interface I should to use for this config.

We can not use VirtualWire interfes, because from one side one port is connected to Cisco and for Juniper we have two ports. (Juniper Cluster)

Thanks in advance.

Bek.

Re: Cisco - trunk- PA - trunk - Juniper SRX

rmonvon — Thu, 30 May 2013 14:59:20 GMT

I suggest defining L2 or L3 interfaces to connect to the Cisco and Juniper. You will need to define virtual sub-interface(s) for each VLAN on the trunk. Thanks.

Re: Cisco - trunk- PA - trunk - Juniper SRX

VinceM — Thu, 30 May 2013 15:33:04 GMT

Best one should be L2 interfaces, mean palo will be "transparent " then no routing

Else, L3 interfaces with sub per vlan.

Re: Cisco - trunk- PA - trunk - Juniper SRX

Ulugbekyu — Thu, 30 May 2013 15:45:30 GMT

Problem is that Cisco and Junip uses trunk port with allowed 2 vlans.

PA-2050 doesn't allow Agregate interface. To Cisco looking 1 port and 2 ports looks for Junip cluster.

How can I configure interfaces in PA to allowe 2 vlans in one port?

Re: Cisco - trunk- PA - trunk - Juniper SRX

rmonvon — Thu, 30 May 2013 16:53:20 GMT

Starting in PAN-OS 5.0, aggregate Ethernet is supported on the PA2020 & PA2050. You may need to upgrade to 5.0.

See this Tech Notes on how to create virtual sub-interfaces for L2 and L3 modes.

Thanks.

Re: Cisco - trunk- PA - trunk - Juniper SRX

Ulugbekyu — Fri, 31 May 2013 07:53:09 GMT

rmonvon thank you for answer. I think we should update our PA and than try to connnect with aggregate interaface.