Virtual Wires and Tag allowed

[MP18]

We are setting up PA in v wire mode.

Say  we have switch 1--- vlan tag 244,245,250----------------vwire---PA----vwire-------------------vlan tag 244,245,250  Switch2

Need to know under vwire pair for tag allowed should i leave it default  that is any tag from 0 to 4094?

OR should i put vlan tag numbers  244,245 and 250 under tag allowed?

Mike

[kiwi]

Hi @MP18 ,

Can this help you :

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClqSCAS

Cheers !

-Kiwi.

[BatD · Accepted solution]

@MP18 Not quite clear from the article, if you leave the field blank, the vwire will only allow untagged traffic. 

As per article 0-4094 will allow all taggs  or you can list the required tags as coma separated or specify ranges with "-". "

[MP18]

tested with leaving field blank and it does not work.

Mean it does not allow tagged traffic is this by design?

To make it work we need to add the vlan tags

[OtakarKlier · Accepted solution]

Hello,

Make sure you tag all vlans:

For a trunk to be passed through, allow all tags '0-4094'. [Network>Virtual Wires>Click on desired Vwire > Tag Allowed >Type in 0-4094 to allow trunked traffic.

Regards,

[MP18]

it do not work when i allow all tags  i mean if i leave

field empty does it allow all tags automatically?

or do i need to type 0-4094?

[OtakarKlier · Accepted solution]

Yes you need to type in 0-4094.