Link Aggregation Support on VM-Series
VM-Series firewalls support link aggregation in ESXi and KVM
environments.
VM-Series firewalls add support for link aggregation for ESXi and KVM environments.
This feature supports multiple connections that combine into a single logical
bonding device with a unique name that is associated with a network device (either
physical or virtual) as secondary devices. The bonded device possesses a unique MAC
address that is shared among all secondary devices.
Important things to consider:
An Aggregate Ethernet interface uses the MAC address from the base
and not from the hypervisor. This takes effect after rebooting newly
deployed and licensed VM-Series firewalls.
An unlicensed Panorama VM uses an erroneous Aggregate Ethernet MAC
address, while the licensed VM receives a proper MAC address. If the
Panorama VM deploys initially without a license, the Aggregate Ethernet
interface receives this erroneous MAC address. Once you procure the license,
reboot the VM to retrieve the new base MAC address from the license key
file.
To configure link aggregation, enable PAN-OS to change VM MAC addresses. To
do this, configure MAC address changes: Accept.
Link aggregation of HA interfaces isn't supported in public
cloud environments, like AWS, Azure or GCP.
Learn how to configure link aggregation support on the VM-Series for
ESXi and
KVM.
