Cisco - trunk- PA - trunk - Juniper SRX

[Ulugbekyu]

Cisco - trunk- PA - trunk - Juniper SRX

Please help to configure PA-2050 for trunk ports between cisco and juniper.

Which type of interface I should to use for this config.

We can not use VirtualWire interfes, because from one side one port is connected to Cisco and for Juniper we have two ports. (Juniper Cluster)

Thanks in advance.

Bek.

[rmonvon]

I suggest defining L2 or L3 interfaces to connect to the Cisco and Juniper.  You will need to define virtual sub-interface(s) for each VLAN on the trunk.  Thanks.

[VinceM]

Best one should be L2 interfaces, mean palo will be "transparent " then no routing

Else, L3 interfaces with sub per vlan.

V.

[Ulugbekyu]

Problem is that Cisco and Junip uses trunk port with allowed 2 vlans.

PA-2050 doesn't allow Agregate interface. To Cisco looking 1 port and 2 ports looks for Junip cluster.

How can I configure interfaces in PA to allowe 2 vlans in one port?

[rmonvon]

Starting in PAN-OS 5.0, aggregate Ethernet is supported on the PA2020 & PA2050.  You may need to upgrade to 5.0.

See this Tech Notes on how to create virtual sub-interfaces for L2 and L3 modes.

Thanks.

[Ulugbekyu]

rmonvon thank you for answer. I think we should update our PA and than try to connnect with aggregate interaface.