About Simon.Cardman

@BPry Thanks for your response, I have asked to design a resilient solution to allow HPC devices to access the internet to upload cutomer data to the cloud. Hence the reason for Active / Active and multiple links on the inside and the outside. Yes the 4 x 10GB outside circuits would be utilised but at half B/W. For resilience they would need to be four seperate ISP's.   On the inside then a QSFP link from each edge switch to each Firewall L3 link, again - resilience. i wasnt aware Active / Active is not recommended.   Yes i think for this spend i will engage an SE,    Many Thanks   Simon   ... View more

@Simon.Cardman, The creation of the Aggregate on the Palo Alto is relatively easy as long as you configure at least one port to continue to pass traffic. If you are not to terribly worried about port count I would configure one port as a 'backup' so to speak that you don't put in an aggregate. Create your aggregate with the two ports and verify that it comes up correctly, then you simply remove the port used as the 'backup' and let the aggregate do it's thing.    ... View more