Aggregated Interfaces for a Virtual
Wire
A virtual wire supports aggregate interface groups; if
LACP is configured on devices connected to the firewall, the virtual
wire passes LACP packets transparently.
You can
Configure
an Aggregate Interface Group of virtual wire interfaces,
but virtual wires don’t use LACP. If you configure LACP on devices
that connect the firewall to other networks, the virtual wire will
pass LACP packets transparently without performing LACP functions.
On a virtual wire, the Palo Alto Networks firewall can pass
Cisco LACP traffic only when the links are not
aggregated on the firewall. On a virtual wire, if the links are aggregated, then the
firewall could forward the packets to the wrong port in Aggregated Ethernet, which will
cause LACP not to function between peers.
In order for aggregate interface groups to
function properly, ensure all links belonging to the same LACP group
on the same side of the virtual wire are assigned to the same zone.
