Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Link Aggregation Query

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Link Aggregation Query

L4 Transporter

We have PA 500 which links to 100 Mbps throughput as mentioned by datasheet.

If we do link aggregation would it be possible for us to increase that ?

 

Thanks in advance.

SD-WAN | Cloud Networking | PCNSE | ICSI CNSS | MCNA | | CCNP | CCSA | SPSP | SPSX | F5-101 |
4 REPLIES 4

L7 Applicator

The datasheet limitations are not based on physical port limits but on the processing of traffic and inspection limits of the platform.  They cannot be increased by port aggregation or other physical means.

 

They do tend to be conservative in their estimation of processing power, so you can likely experience better performance.  But the base limitations are with the packet inspection and processing not the port speeds.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center

so link aggregration are basically for interface redundancy ?

SD-WAN | Cloud Networking | PCNSE | ICSI CNSS | MCNA | | CCNP | CCSA | SPSP | SPSX | F5-101 |

You can aggregate interfaces to increase the potential throughput achievable by an interface group, but you will never be able to surpass the platform total capacity
It's not clear which of the two you are trying to increase
Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

The other thing to be aware of is that these specifications are specific to the feature they mention in the sheet.  So for the PA500 the 100M specification is for traffic that hits policies with threat prevention enabled.  The 250 M is for traffic that hits policies that use app-id.  So these are not the total traffic passing the interface but the traffic actually processes by the inspection system.

 

https://media.paloaltonetworks.com/documents/Summary_Specsheet-Nov12.pdf

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
  • 2329 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!