This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Cookie Policy. Click Preferences to customize your cookie settings.
About Gene_Barden
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Gene_Barden
03-22-2022
47Posts
0Likes
1Solution
Mar 22, 2022Last Visited
User
Activity
User
Profile
Latest posts by Gene_Barden
| Subject | Views | Posted |
|---|---|---|
| 2412 | 10-01-2021 06:25 AM | |
| 1605 | 08-25-2021 03:00 PM | |
| 2419 | 03-09-2021 08:53 AM | |
| 2457 | 03-09-2021 06:42 AM | |
| 2503 | 03-09-2021 05:23 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes |
User Badges
Community Statistics
| Member Since | 06-06-2018 08:55 AM |
| Date Last Visited | 03-22-2022 03:35 PM |
| Posts | 47 |
09-24-2020
02:15 PM
Customer is replacing a 2 pair of 5050's multi-vsys with 2 pair of 5250's. All of the configurations are local to the firewall with the exception of objects which are managed by Panorama. The final plan will be to have Panorama manage the firewalls appropriately. The 5050's will still be in place for a while after migrating to the 5250's. What is the best option to migrate. I've seen different scenarios. Is it best to add the firewalls to Panorama and place in the same device-group as the 5050's and do load-config-partials for the local config or just import the xml file into the 5250's? I also have the device state of the 5050's.
... View more
08-25-2020
05:59 AM
Here is the physical topology of the scenario. All switch connections south of the Palo are trunk ports with all of the vlans trunked. The link between the 2960s has all vlans trunked except for the primary vlan2 which is the main vlan for the network and to the ASA. I have also attached an A/P scenario adding additional switches north of the Palo connected to the ASA also. Trying to decide which scenario will work best. Active/Active Active/Passive
... View more
08-24-2020
01:39 PM
I have a n HA pair of ASA and will be implementing an HA pair of PANS between the Core and ASAs. I can send a topology if necessary. Currently have a Cisco 3750 layer 3 connected to two separate Cisco 2960s via a trunk link. The2960s are aslo inter-connected via a trunk link. The ASAs are connected to each 2960 via access port. The original idea was to implement the Palo Altos in A/P but it seems easier to implement A/A. Are there any gotchas for this scenario. I know it is best practice and recommended for Vwire A/A in a layer 3 topology only and to make sure spanning-tree is configured properly for layer 2. From what I have read you should not carry the Vwire vlan across the inter-switch trunk but wold this just be for the trunk between the 2960's or all of the trunk links? I would think the traffic would not pass if the vlan is not allowed between the 3750 and 2960 trunks.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-22-2022
03:35 PM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks