Let's Talk About Palo Alto - Layer 2 VLANs

In this video, we will take a look at Layer 2 VLANs on the Palo Alto firewall. Which will give us the ability to provide access and control between a few devices in the same subnet.

[@Farhan640]

I like your video's because you make with complex topology not like others just with 2 or 3 device. Please make more video's on ccna topics with complex topologies

[@wadelucas9711]

Thanks Pal! Just implemented this for a design

[@jigzbagsicjr7099]

Hey Rob, question does PALO ALTO support layer 2 bridging?

[@goddaynwanmaorhuebor3900]

Hi Rob, thanks for the video. Please I have a question which is, when you created the vlan it was just a name you gave it but no tag of the vlan number. Will this work in a situation were the packet is tagged from maybe a switch or a router subinterface coming towards the PA FW? If not, please how do we add the vlan tag on the interface ?

[@RobRikerTechChannel]

I will add this as a test and record the results. Didn't try that yet.

[@goddaynwanmaorhuebor3900]

@@RobRikerTechChannel I figured it out. It's by adding a subinterface on the physical interface, that way you are able to tag with the specific actual vlan number. I have also lab it and it worked perfectly.

[@gregorpula]

@@goddaynwanmaorhuebor3900 Thanks for this! I find the way VLANs are implemented in PAN-OS very illogical, especially when it comes to creating access ports.

[@aykhan.g]

sorry,which cpu and how much ram does your pc have ?

[@RobRikerTechChannel]

this was ran on a server 8 core Xeon CPU with 128 GB RAM