cancel
Showing results for 
Search instead for 
Did you mean: 

NSP with link aggregation

Jump to solution

I have to connect a NSP sensor between two Cisco switches connected with 2 redundant links. Links were configured in a link aggregation pipe using PAGP+ protocol. Does anyone have the experience on connecting the sensor in a link aggregation pipe with PAGP+ protocol?. I am concerned about PAGP+ because is Cisco's propietary protocol and I am afraid the sensor could see it as an anomaly protocol.

Thnks!

1 Solution

Accepted Solutions

Re: NSP with link aggregation

Jump to solution

PAGP+ (aka etherchannel) is supported through the sensor.  You should keep in mind that you will want to group the sensor ports the links are going through, so the sensor can track TCP flows across the multiple monitoring ports.   You can use the "Manager Interface Groups" section of the NSP to do this.

We have customers running etherchannel throught he sensor, and I have not seen any issues to date.  I still would setup a test environmnet first if possible!

2 Replies

Re: NSP with link aggregation

Jump to solution

PAGP+ (aka etherchannel) is supported through the sensor.  You should keep in mind that you will want to group the sensor ports the links are going through, so the sensor can track TCP flows across the multiple monitoring ports.   You can use the "Manager Interface Groups" section of the NSP to do this.

We have customers running etherchannel throught he sensor, and I have not seen any issues to date.  I still would setup a test environmnet first if possible!

Re: NSP with link aggregation

Jump to solution

Hi Steve, thanks so much for your response. Because I had no answer until yesterday, I have had to test it right on the field in a production environment one week ago, risky but an exciting way to test it

According what you said NSP worked fine with PAGP+ etherchannel configured in desirable mode. NSP configuration feature I applied was Interface Group and I have used it before with 802.3ad standard Link Aggregation protocol.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community