LACP Negotiation is failing after upgrade to 10.0.x
4022
Created On 06/15/23 22:19 PM - Last Modified 06/19/25 03:15 AM
Symptom
The symptoms are LACP flap and in some cases total outage after upgrade.
Environment
- PAN-OS 10.0.x and higher
- PA-7000
Cause
- PAN-OS 10.0.x and above supports QSFP breakout and so the ports mapping is different
- Here the QSFP port can be used as breakout ports
- Example PORT 25 can be used as breakout ports 9/10/11/12.
- Either one of them should be configured not both.
- If Ports 25 & 26 are configured then breakout ports are in disabled mode. If any of the interfaces are configured before upgrade then that will cause this issue.
QSFP breakout port mapping
- port 25 - (9,10,11,12)
- port 26 - (13,14,15,16)
- Port 27 - (17,18,19,20)
- Port 28 - (21,22,23,24)
Resolution
Ensure Breakout ports and QSFP 100g ports are not configured at the same time when migrating from 9.1 to higher versions.
Additional Information
PA-7000 100G NPC Component Descriptions