How to Enable/Use/Disable/Check Jumbo Frame Support on a Palo Alto Networks Firewall

How to Enable/Use/Disable/Check Jumbo Frame Support on a Palo Alto Networks Firewall

167114
Created On 09/25/18 19:20 PM - Last Modified 01/17/24 17:30 PM


Symptom


How to Enable/Use/Disable/Check Jumbo Frames Support on a Palo Alto Networks Firewall.



Environment


  • PA-220, PA-400, PA-800, PA-1400, PA-3000, PA-3200, PA-3400, PA-5000, PA-5200, PA-5400, PA-7000, and PA-VM series Firewalls
  • Supported PAN-OS
  • Jumbo frame
Note:  Jumbo Frame is not supported on:
  • PA-200
  • PA-500


Resolution


When Jumbo Frames are enabled, the default MTU value settings will be 9192 bytes. The maximum supported MTU is 9216 bytes.

Notes:  When enabled, it is applied to all the Data Plane interfaces, including the HA interfaces. It is possible to enable the Jumbo Frames globally with a lower default value of 1500 and then customize the only interfaces needed with a higher MTU as per the business requirement. As a reminder, it is important to configure the switch accordingly.

Details

To enable Jumbo Frame support:

  1. Navigate to GUI: Device > Setup > Session in the web UI.
  2. Click Edit for the Session Settings section.
  3. Enable Jumbo Frame support and specify the Jumbo Frame MTU in this section.
  4. Commit the changes.
  5. Reboot the device for this change to take effect.

CLI command to enable jumbo frame:

> set system setting jumbo-frame on

To use Jumbo Frame support on an interface:

  1. Navigate to the Network tab.
  2. Select the appropriate interface.
  3. Set the MTU size for the interface, up to the size specified under Device > Setup > Session.
    MTU.PNG
  4. Commit the changes.

To disable Jumbo Frame support:

  1. Uncheck Jumbo frame support from Web UI via Device > Setup > Session > Session Settings.
  2. If applicable, adjust the MTU size on interfaces that were configured for Jumbo Frame support.
  3. Commit the changes and reboot the device.

CLI command to disable jumbo frame:

> set system setting jumbo-frame off

 

To check if the device is enabled for Jumbo Frame support:

  1. Check ‘Jumbo frame support’ setting from Web UI via Device -> Setup -> Session -> Session Settings.

    CLI command to check jumbo frame:
    > show system setting jumbo-frame
    Device Jumbo-Frame mode: on
    Maximum of frame size excluding Ethernet header: 9192
  2. To view the Jumbo Frame setting at an interface level, use the following CLI command:
> show system state filter-pretty sw.dev.interface.config

sw.dev.interface.config: {
  ethernet1/3: {
    hwaddr: 00:1b:17:89:94:12,
    mtu: 9192,
  },
  ethernet1/4: {
    hwaddr: 00:1b:17:89:94:13,
    mtu: 9192,
  },
  ethernet1/7: {
    hwaddr: 00:1b:17:89:94:16,
    mtu: 1500,
  },
  ethernet1/8: {
    hwaddr: 00:1b:17:89:94:17,
    mtu: 1500,
  },
}

 

       3. Jumbo frame  mode can also be checked using the following CLI command:
> show system state filter-pretty cfg.jumbo-mode
cfg.jumbo-mode: True

 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVaCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language