Aggregate Interface Trouble Shooting

[rockfort]

My environment has Palo Alto Firewalls that has Aggregate Interface configuration and use. There are infrequent issues with them and I have some questions:

1. What are the tools for trouble shooting Aggregate Interfaces within the GUI (web interface)
2. What are the CLI commands for trouble shooting Aggregate interfaces

Thanks in advance

[EdwinMatos]

How is you setup look?. Meaning what do you have on the other of the Palo Alto, and how is the port setup on the other end. I normally start troubleshooting on the switch side.

[rockfort]

Edwin thank you for your reply. I am looking for any "CLI" commands that are common to trouble shooting issues with aggregate interfaces on Palo Alto Firewall. Do you have any that you share with me? Pick the scenarios(any).

Thanks in advance.

[EdwinMatos]

try to viewing the l2ctrld.log file. Check link below.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaYCAS

show system state | match debug.level OR debug l2ctrld global show

debug l2ctrld global [ on | off | show ]

[MP18 · Accepted solution]

Try this command 

show lacp aggregate-ethernet 

show lacp aggregate-ethernet
all Show all LACP-enbled AE interfaces
<value> <name> AE interface name

[rockfort]

Thank you.