An aggregate interface group uses IEEE 802.1AX link aggregation to combine multiple Ethernet
interfaces into a single virtual interface that connects the firewall to another
network device or another firewall. An aggregate group increases the bandwidth
between peers by load-balancing traffic across the combined interfaces. It also
provides redundancy; when one interface fails, the remaining interfaces continue
supporting traffic.
By default, interface
failure detection is automatic only at the physical layer between
directly connected peers. However, if you enable Link Aggregation
Control Protocol (LACP), failure detection is automatic at the physical
and data link layers regardless of whether the peers are directly
connected. LACP also enables automatic failover to standby interfaces
if you configured hot spares. All Palo Alto Networks firewalls except
VM-Series models support aggregate groups. You can add up to eight
aggregate groups per firewall and each group can have up to eight
interfaces.
