Layer-3 Channel-Group config on IR829 Router

[francis fox]

Hello

I have an IR829 router connected to a 3560 switch, the 829 is running IOS 15.6(3)M2

I wanted to use a pair of interfaces to connect the router to the switch

I want to configure a layer-3 port-channel with subinterfaces

I can configure the port-channel no problem

However I am finding the channel-group command is not supported on the Gi1 - 2 interfaces

Is this configuration supported on the IR829?

Is there another way of doing it?

[Flavio Miranda]

Hi @francis fox

 Does not support. I played with this router a lot in the past and never see this. 

The Datasheet only refers to this when it comes to Ethernet ports:

Four Gigabit Ethernet PoE/PoE+ interfaces
● Allows for multiple Ethernet device connectivity in a small office or other remote location with the ability to designate a port as the network edge.
● VLANs for switching capabilities.
● Inter-VLAN routing capabilities.
● 30W of PoE/PoE+ shared across the four Gigabit Ethernet interfaces.

-If I helped you somehow, please, rate it as useful.-

[francis fox]

Thanks for the reply

I want to bring several VLANs into the router on an 802.1Q trunk

Then do some zone based firewalling between the subinterfaces and/or the WAN interface

Do you think i am going to be able to configure this?

[Flavio Miranda]

Trunk I believe so. ZFW probably not. Mabe you can add a Firewall on the topology.

-If I helped you somehow, please, rate it as useful.-

[francis fox]

We can't add a firewall unfortunately - need to use ZBF

So looks like I can configure a trunk (not sure how the VLAN allowed bit works)

Then configure SVIs on the router for each VLAN

Then configure Zones

The assign the Zones to SVIs

Then implement ZBF between the SVIs

Does that sound plausible?

[Flavio Miranda]

I think so. I got this from isr800 Data sheet and we can see that ZBF is present. 

To be honest I did not tested this but we are following documentation here.

So, try this and let us know!

Security features Secure connectivity:
● Secure Sockets Layer (SSL) VPN for secure remote access
● Hardware-accelerated DES, 3DES, AES 128, AES 192, and AES 256
● Public-key-infrastructure (PKI) support
● 20 IPsec tunnels
● Cisco Easy VPN Solution client and server
● Network Address Translation (NAT) transparency
● Dynamic Multipoint VPN (DMVPN)
● Tunnel-less Group Encrypted Transport VPN
● Flex VPN
● IPsec stateful failover
● VRF-aware IPsec
● IPsec over IPv6
● Adaptive control technology
● Session Initiation Protocol (SIP) application layer gateway
Cisco IOS Firewall:
● Zone-based policy firewall
● VRF-aware stateful inspection routing firewall

-If I helped you somehow, please, rate it as useful.-