V-Wire Mode with trunk

[Harshit]

Hey Guys,

i am about to deploy PaloAlto 5020 in a v-wire mode with trunk on them, does any one has any known issues that i may encounter

here is the topology

Current: switch ====(trunk)===== cisco firewall

new: switch======(trunk)=====PaloAlto (vwire)=====(trunk)====Cisco firewall.

Any help would be appreciated.

Regards,

~Harry

[HULK]

Hello Harshit,

Few related information for you:

Cisco Link Aggregation Traffic Through a PAN Device

Which Link Aggregation Protocols are Supported?

LACP LAG

LACP support

Hope this helps.

Thanks

[pulukas]

I setup v-wire with q tag trunk ports on the 5000 series for a data center deployment.

this can be as simple as outlined in this document.  Where there is only two zones and all tags are just permitted through the v-wire.

Trunked Traffic in a V-Wire

If you want more control, you can create a subinterface for each q tag on the v-wire.  These can then be placed onto their own v-wire pipe and assigned zones separately from the other q tags on the trunk port.  This also prevents the automatic passing of additional tagged frames on the trunk without the explicit configuration of the sub-interface and v-wire pair.

• Create the v-wire for the tag
• Create the sub-interface on both physical interfaces and assign the tag and the v-wire
• Assign each side of the v-wire to the desired zones
• Rules will then apply by zone assignment of the particular v-wire pairs