I don't know about port aggregation, but yes, you can trunk...it takes a few steps though.
1. You need to create a "Parent interface" (VPN ethernet interface) which you will put into VPN 0. For us, the only thing we had to modify on that template was the MTU which we changed to 1504 (larger packet due to trunking info in packet). Let's say the trunk interface is Ge0/0 on a 100M. The "interface name" in the template would be "ge0/0".
2. Now create the sub-interfaces. So say you want to create a sub-interface for VLAN 20. The "interface name" (in the template) would look like this: "ge0/0.20" and that interface goes into the "Service" VPN. There were no other changes to this ethernet interface. (The MTU was left @ 1500). If you wanted to then create a sub-interface for VLAN 10 it would have a name like "ge0/0.10"; and so forth for other sub-interfaces.
Hope this helps you.
