How to configure wire mode with Link Aggregation( inline traffic monitor over LAG)

03/26/2020 1083 14735

DESCRIPTION:

A  SonicWall security appliance can be connected inline over LAG (Link Aggregation group) to inspect the bypass traffic and allowing packets sent on the group to be bridged across to the destination transparently as well.

RESOLUTION:

The LAG connection has been established successfully with LACP enabled between two CISCO switches. A SonicWall appliance will be deployed inline to inspect the traffic over LAG and also bypassing all the traffic as well as LACP packet between the CISCO and CISCO switch.

Fig.1 LAG without SonicWall inline


Fig.2 C3550-24 LAG Summary


Fig.3 C3560G-24TS LAG Summary

Fig.4 Ping from PC 10.103.20.54 to Laptop

• From the Zone menu, select the zone you want.
• From the Mode/IP Assignment menu, select Wire Mode(2-Port Wire).
• From the Wire Mode Type menu, select Secure (Active DPI of Inline Traffic).
• From the Paired Interface menu, select the interface you want.
• From the Paired Interface Zone menu, select the zone you want.
• (Optional) Select the Disable Stateful Inspection option if you want it.
• (Optional) Select the Enable Link State Propagation option if you want it.

Fig.6 General Tab

Options in the Advanced Tab

• From the Redundant/Aggregates Ports menu, select Link Aggregation.
• For the Aggregate Port, select the port that you want.
• Fort the Paired Interface Aggregate Port, select the port that you want.
• Click OK

Fig.7 Advanced Tab

Fig.9 Testing the channel