07-24-2017 07:01 AM
We're currently using two PAN-5060 units in Active/Active and they're directly connected to two Cisco 4500-X units in VSS.
On the Palo Alto side, we have an aggregate group with the vlans all set up as tagged sub-interfaces.
On the Cisco side, I believe the port-channels are just normal port-channels and the interfaces they are applied are are set to "mode active" on the channel-group. We're trunking Layer 3 vlans across so the port-channels are set up as switchports with "switchport mode trunk" and then we allow the vlans across that will have matching sub-interfaces on the Palo's aggregate group.
