Lab initial procedure for PA VM 8.0

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Lab initial procedure for PA VM 8.0

L2 Linker

Hello Team,

 

First of all am a noob on the paloalto and I'm diving into the Palo Alto Firewall world after spending a year on the Cisco L2 side. Just set up a lab mirroring the site design for a new organization, and it's my first go at Palo Alto. For the real deal, I'll be handling a PA-850. Feeling pretty good about Nexus and endpoints, but could use some suggestions from the Palo Alto pros. Any suggestions or tips to nail this lab and smooth sail through the site deployment (what steps should i take on the palo alto Firewall) would be awesome. Thanks a bunch for any insights!

Once more, I'd really appreciate any assistance you can offer for step-up the LAB. Thanks a bunch!

 

Thanks,

Punkn

3 REPLIES 3

Cyber Elite
Cyber Elite

I suggest to put switch between ISPs and Palo so that both Palos see both ISPs.

This allows to start with active/passive configuration.

Active/active will add quite a few more configuration settings that need to be set and adds unnecessary complexity. Specially if you just start with Palos.

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

L2 Linker

Hello Raido,

Absolutely, thanks for the suggestion, and I've already shared it with my buddy. Is it possible set up the PA cluster HA in an active/passive configuration for my new setup?. Also, I want to ensure that the LACP setup I mentioned in the new setup should function smoothly ??, considering my Nexus setup is in vPC ?.

soorajpmenon5_0-1705267429493.png

Thanks,

Punkn

 

Cyber Elite
Cyber Elite

You can have links to separate switches in same LACP bundle in Palo only if both peers (both Nexus switches) advertise themselves with same LACP ID.

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011
  • 891 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!