Virtual Wires and Tag allowed

cancel
Showing results for 
Search instead for 
Did you mean: 

Virtual Wires and Tag allowed

Cyber Elite
Cyber Elite

 

We are setting up PA in v wire mode.

 

Say  we have switch 1--- vlan tag 244,245,250----------------vwire---PA----vwire-------------------vlan tag 244,245,250  Switch2

 

 

Need to know under vwire pair for tag allowed should i leave it default  that is any tag from 0 to 4094?

 

OR should i put vlan tag numbers  244,245 and 250 under tag allowed?

 

Mike

MP
3 ACCEPTED SOLUTIONS

Accepted Solutions

L4 Transporter

@MP18 Not quite clear from the article, if you leave the field blank, the vwire will only allow untagged traffic. 

As per article 0-4094 will allow all taggs  or you can list the required tags as coma separated or specify ranges with "-". "

 

View solution in original post

Hello,

Make sure you tag all vlans:

 

For a trunk to be passed through, allow all tags '0-4094'. [Network>Virtual Wires>Click on desired Vwire > Tag Allowed >Type in 0-4094 to allow trunked traffic.

 

Regards,

View solution in original post

Yes you need to type in 0-4094.

View solution in original post

6 REPLIES 6

Community Team Member

Hi @MP18 ,

 

Can this help you :

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClqSCAS

 

Cheers !

-Kiwi.

LIVEcommunity team member, CISSP
Cheers,
Kiwi
Don't forget to hit that Like button if a post is helpful to you!

L4 Transporter

@MP18 Not quite clear from the article, if you leave the field blank, the vwire will only allow untagged traffic. 

As per article 0-4094 will allow all taggs  or you can list the required tags as coma separated or specify ranges with "-". "

 

tested with leaving field blank and it does not work.

Mean it does not allow tagged traffic is this by design?

 

 

To make it work we need to add the vlan tags

MP

Hello,

Make sure you tag all vlans:

 

For a trunk to be passed through, allow all tags '0-4094'. [Network>Virtual Wires>Click on desired Vwire > Tag Allowed >Type in 0-4094 to allow trunked traffic.

 

Regards,

it do not work when i allow all tags  i mean if i leave

 

field empty does it allow all tags automatically?

 

or do i need to type 0-4094?

MP

Yes you need to type in 0-4094.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!