Matrix/discussion of capability with the differing interface deployment modes

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Matrix/discussion of capability with the differing interface deployment modes

L3 Networker

Is there a discussion or KB article that discusses a matrix/capability of the differing interface deployment modes.

I.e.,  Layer2's pros and cons, Vwire's pros and cons, etc.

1 accepted solution

Accepted Solutions

Cyber Elite
Cyber Elite

there is one now 🙂

 

there's a section in the Admin guide that shortly describes all types of interfaces: Interface Deployments

 

 

any specific differences you are looking for ? let me try to list a few (for layer 2 interfaces, there is a layer3 config you can enable for the layer3 functionality so it's not strictly _on_ layer2, it does add the support to the layer2)

 

supports: vwire layer2 layer3  tap
vlan tags y y y y
tagged subinterfaces y y y n
untagged subinterfaces n n y n
minimum physical interfaces 2/vwire 1 1 1/tap
maximum physical interfaces 2/vwire all all all
routing n y y n
nat y y y n
wirespeed/SPPP y y y y
qos y y y n
dhcp n y y n
ssl decryption y y y y-inbound n-outbound
Captive Portal y y y n
policy based forwarding n y y n

 

 

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

View solution in original post

3 REPLIES 3

Cyber Elite
Cyber Elite

there is one now 🙂

 

there's a section in the Admin guide that shortly describes all types of interfaces: Interface Deployments

 

 

any specific differences you are looking for ? let me try to list a few (for layer 2 interfaces, there is a layer3 config you can enable for the layer3 functionality so it's not strictly _on_ layer2, it does add the support to the layer2)

 

supports: vwire layer2 layer3  tap
vlan tags y y y y
tagged subinterfaces y y y n
untagged subinterfaces n n y n
minimum physical interfaces 2/vwire 1 1 1/tap
maximum physical interfaces 2/vwire all all all
routing n y y n
nat y y y n
wirespeed/SPPP y y y y
qos y y y n
dhcp n y y n
ssl decryption y y y y-inbound n-outbound
Captive Portal y y y n
policy based forwarding n y y n

 

 

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

That is literally what I was after.. a matrix like that...
PAN reps should publish this as a KB. Brilliant ! & Thankyou.

Hello,

 

the design guide describes the different deployment modes with their advantages / disadvantages:

 

https://live.paloaltonetworks.com/t5/Integration-Articles/Designing-Networks-with-Palo-Alto-Networks...

 

  • 1 accepted solution
  • 2425 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!