Virtual-Wire Link Aggreagaion

[KiCheon.Lee]

Hello

I installed about virtual-wire link aggregation. (image1.png & image2.png)

all members of 'ae1' are ethernet 1/3 , 1/5 , 1/7.

all members of 'ae2' are ethernet 1/4 , 1/6 , 1/8.

all members of 'ae2' was disconnected when I had removed ethernet 1/3. (image3.png)

They was connected after 5 seconds.(image4.png)

The device is enabled link state pass through.

Are this situation and result right??

Thanks

[UhMayYeah]

This doesn't seem to be a best practice :

Ref:https://live.paloaltonetworks.com/message/24408#24408

[UhMayYeah]

Link state passed through should be up if any of the ports are up .However, It is STRONGLY recommended  to set up individual virtual-wires in your aggregation instead of using aggregate ethernet interfaces in virtual wires.

Reasons:

1> There  issues with LACP if it¹s being used.

2>Session hashing will make it impossible to predict which egress port will be selected based on the ingress port.

Conclusion: Complications

Advantage Of Multiple V-WIRES : If you set up multiple virtual wires, you¹ll know exactly where the packet will come out based on the ingress interface.

HTH

-Ameya

[_slv_]

From release note of PAN 5.0.5:

Link Aggregation—The PA-500 and PA-2000 Series devices now support link aggregation. Note that link aggregation on virtual wire interfaces is not supported on the PA-2000 Series due to a hardware limitation. By assigning common ingress and common egress zones, two or more virtual wires may still be used on the PA-2000 Series in environments where adjacent devices are performing link aggregation.

Maybe it will be usefull for you

Regards

Slawek