IEEE 802.3 LAG MIB
Use the IEEE 802.3 LAG MIB to monitor the status of aggregate groups that have Link Aggregation Control Protocol (ECMP) enabled. When the firewall logs LACP events, it also generates traps that are useful for troubleshooting. For example, the traps can tell you whether traffic interruptions between the firewall and an LACP peer resulted from lost connectivity or from mismatched interface speed and duplex values.
PAN-OS implements the following SNMP tables for LACP.
The dot3adTablesLastChanged object indicates the time of the most recent change to dot3adAggTable, dot3adAggPortListTable, and dot3adAggPortTable.
Aggregator Configuration Table (dot3adAggTable)
This table contains information about every aggregate group that is associated with a firewall. Each aggregate group has one entry.
Some table objects have restrictions, which the dot3adAggIndex object describes. This index is the unique identifier that the local system assigns to the aggregate group. It identifies an aggregate group instance among the subordinate managed objects of the containing object. The identifier is read-only.
The ifTable MIB (a list of interface entries) does not support logical interfaces and therefore does not have an entry for the aggregate group.
Aggregation Port List Table (dot3adAggPortListTable)
This table lists the ports associated with each aggregate group in a firewall. Each aggregate group has one entry.
The dot3adAggPortListPorts attribute lists the complete set of ports associated with an aggregate group. Each bit set in the list represents a port member. For non-chassis platforms, this is a 64-bit value. For chassis platforms, the value is an array of eight 64-bit entries.
Aggregation Port Table (dot3adAggPortTable)
This table contains LACP configuration information about every port associated with an aggregate group in a firewall. Each port has one entry. The table has no entries for ports that are not associated with an aggregate group.
LACP Statistics Table (dot3adAggPortStatsTable)
This table contains link aggregation information about every port associated with an aggregate group in a firewall. Each port has one row. The table has no entries for ports that are not associated with an aggregate group.
The IEEE 802.3 LAG MIB includes the following LACP-related traps:
The peer lost connectivity to the firewall.
The peer does not respond to the firewall.
LACP negotiation with the peer failed.
The link speed and duplex settings on the firewall and peer do not match.
An interface in the aggregate group is down.
An interface was removed from the aggregate group.
An interface was added to the aggregate group.
For the MIB definitions, refer to IEEE 802.3 LAG MIB.
Configure an Aggregate Interface Group
Configure an Aggregate Interface Group An aggregate interface group uses IEEE 802.1AX link aggregation to combine multiple Ethernet interfaces into a single virtual interface that ...
Aggregate Ethernet (AE) Interface Group
Aggregate Ethernet (AE) Interface Group Network > Interfaces > Ethernet An AE interface group uses IEEE 802.1AX link aggregation to combine multiple Ethernet interfaces into ...
Aggregate Ethernet (AE) Interface
Aggregate Ethernet (AE) Interface Network > Interfaces > Ethernet To configure an Aggregate Ethernet (AE) Interface , first configure an Aggregate Ethernet (AE) Interface Group ...
Aggregated Interfaces for a Virtual Wire
A virtual wire supports aggregate interface groups; if LACP is configured on devices connected to the firewall, the virtual wire passes LACP packets transparently. ...
Supported MIBs The following table lists the Simple Network Management Protocol (SNMP) management information bases (MIBs) that Palo Alto Networks firewalls, Panorama, and WF-500 appliances ...
BGP Tab The following table describes the virtual router’s Runtime Stats for BGP. BGP Runtime Stats Description Summary Tab Router Id Router ID assigned to ...
Configure BGP Perform the following task to configure BGP. Configure general virtual router configuration settings. See Virtual Routers for details. Enable BGP for the virtual ...
Prerequisites for Active/Active HA
Prerequisites for Active/Active HA To set up active/active HA on your firewalls, you need a pair of firewalls that meet the following requirements: The same ...
Configure HA Settings
Configure HA Settings To configure HA settings, select Device High Availability and then, for each group of settings, specify the corresponding information described in the ...