About Simon.Cardman

@BPry Thanks for your response, I have asked to design a resilient solution to allow HPC devices to access the internet to upload cutomer data to the cloud. Hence the reason for Active / Active and multiple links on the inside and the outside. Yes the 4 x 10GB outside circuits would be utilised but at half B/W. For resilience they would need to be four seperate ISP's.   On the inside then a QSFP link from each edge switch to each Firewall L3 link, again - resilience. i wasnt aware Active / Active is not recommended.   Yes i think for this spend i will engage an SE,    Many Thanks   Simon   ... View more

@jvalentine   I wasn't sure whether they had to be same or different group. This could be the issue. A lack of documentation for the type of network vendor you are connecting to. But thank you for your advice.   @BPry Agreed, need to upgrade at some point, but global company so we all upgrade together. The Cisco side is VSS cluster so one logical switch but two physical switches. Thanks for your input. ... View more

@Simon.Cardman, The creation of the Aggregate on the Palo Alto is relatively easy as long as you configure at least one port to continue to pass traffic. If you are not to terribly worried about port count I would configure one port as a 'backup' so to speak that you don't put in an aggregate. Create your aggregate with the two ports and verify that it comes up correctly, then you simply remove the port used as the 'backup' and let the aggregate do it's thing.    ... View more

@Brandon_Wertz Hi Thanks for your response. I totally agree if you have a multi homed design. unfortunately we haven't and can't re engineer the edge at the moment. This is just a separate circuit to upload specific source vlans (subnets) to a customer.   thanks   Simon ... View more