Focus

PAN-OS® Networking Administrator’s Guide

Aggregated Interfaces for a Virtual Wire

Table of Contents

Aggregated Interfaces for a Virtual Wire

A virtual wire supports aggregate interface groups; if LACP is configured on devices connected to the firewall, the virtual wire passes LACP packets transparently.

You can Configure an Aggregate Interface Group of virtual wire interfaces, but virtual wires don’t use LACP. If you configure LACP on devices that connect the firewall to other networks, the virtual wire will pass LACP packets transparently without performing LACP functions.

On a virtual wire, the Palo Alto Networks firewall can pass Cisco LACP traffic only when the links are not aggregated on the firewall. On a virtual wire, if the links are aggregated, then the firewall could forward the packets to the wrong port in Aggregated Ethernet, which will cause LACP not to function between peers.

In order for aggregate interface groups to function properly, ensure all links belonging to the same LACP group on the same side of the virtual wire are assigned to the same zone.

LLDP over a Virtual Wire

Virtual Wire Support of High Availability

PAN-OS® Networking Administrator’s Guide

Aggregated Interfaces for a Virtual Wire

Aggregated Interfaces for a Virtual Wire

Recommended For You