Which Link Aggregation Protocols are Supported?

Support for LACP was added in PAN-OS 6.1 on PA-500, PA-3000, PA-4000, PA-5000, and PA-7000 series devices. The firewalls support LACP for HA3 (only on the PA-500, PA-3000 Series, PA-4000 Series, and PA-5000 Series), Layer 2, and Layer 3 interfaces. Prior to PAN-OS 6.1, PAN-OS supports only statically configured aggregated links.

Details

Before PAN-OS 6.1, LACP (Link Aggregation Control Protocol, 802.1ax or 802.3ad) was not supported. Aggregate interfaces that are not running LACP should be defined on the connected devices to firewall. For example, on Cisco switches, the port channel mode for the aggregate interfaces should be set to "On."

For load balancing on PAN-OS 6.1 with LACP disabled, or earlier versions of PAN-OS:

• Sessions originating from the firewall will be sent through the links using a round-robin method.
• The device sending traffic to the firewall through the aggregated link also needs to be configured for load balancing.

See Also

New Features Guide 6.1 (English)

owner: mbutt