Ethernet aggregate group

[Marivi]

Hello,

I have been reviewing aggregate Ethernet interface group 

https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-web-interface-help/network/network-interfaces/ag...

and I see LACP is not enable by default, then I would like to know, How work the aggregate when you not use LACP? What is the default behavior of aggregate interface without LACP?

Thank you in advance 

Regards

Marivi

[VinceM]

Hi Marivi,

By default lacp is not enable. then aggregate work like an activ/passiv aggregate.

With Lacp you can use all link in parallel.

Cheers

v.

[Marivi]

Hello,

Vince ok, but how can we configure which interface act as active and which as passive? I could do it using LACP and configuring max port and priority. htnak you in advance.

Regards

Marivi

[VinceM]

Hi,

you can't 🙂

V.

[Marivi]

Hello,

then for example if I have an ggregate wth 3 interfaces,

which one will act as active and which one as passive?

and what will be the behavior? the interfaces that are in passive (not ingress/egress any traffic )  will became active when ethernet in active mode fail?

Regards

Marivi

[rmfalconer · Accepted solution]

PA firewalls use the 802.1ax standard so all interfaces in an etherchannel are active. LACP isn't required for aggregate interfaces but it does provide some features that are helpful in certain situations.

The PA doc says the traffic is load-balanced, which isn't really accurate. It's more of a load-share depending on settings.