04-03-2022 12:51 PM
Hello.
I have a pair of PA220's - i was trying to lab up a scenario where i could test using aggregate Vwire interfaces to pass LACP (2 x 10gb copper interfaces) through between a Fortigate and a Cisco router, with the Palo in the middle passing the LACP through using Vwire pairs. My PA220 does not appear to support aggregate interfaces but seeming managed to get it to work by creating two separate Vwire pairs ( PAIR1 - port1 and port 2) and (PAIR2 - port 3 and port 4) with ports 1 and 3 in zone trust and ports 2 and 4 in zone untrust. Seems to work Ok, i can ping in both directions and OSPF works. I presume the proper way to do this is by using an aggregated Vwire interface instead on a high capacity model such as the 5000 series, what's the benefit to using the aggregated interfaces in this scenario please?
I was considering putting both Vwire pairs, ports1,2,3 and 4 in the same zone, in case any asymmetric weirdness occurred - anyone ever come across this?
Cheers.
Matt
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
