PA-3020 - Internet Connection over Cisco Switch

[MPI-AE]

Hey guys,

at the moment, there is a direct connection between my Palo Alto Firewall and the Internet Router.

Ethernet 1/20 on the PA is my external interface - it's one of the fiber interfaces.

I want to change this connection from "direct" to "over switch".

My question is: Which SFP module do I need in the cisco switch?

I mean, the PA interface is a 1Gb interface. So perhaps SFP-1GBase-SR?

Is there a possibility to see the sfp type of the interface of the Palo Alto?

I did some research on the web but didn't make a find yet.

Thanks for help!

[Jacopo_Vigano · Accepted solution]

Hi @MPI-AE,

to see the hardware SFP connected into ethernet1/20 on your PA-3020 type this command via CLI:

>show system state filter sys.s1.p20.phy

Let me know.

Jacopo

[MPI-AE]

Oh yeah, that's it! Thanks!

It's 1000B-SX.

So if I use a Cisco 1000BASE-SX GBIC module, everything should work fine?

Or are there some traps?

[Jacopo_Vigano]

Yes, 1000B-SX Gbic should works fine.

Jacopo