limitation "MAGG with LACP configuration is only supported in Chassis, not in Maestro" still exist ?

[Wolfgang]

I'm not sure but this limitations still exists in R81.10? LACP not possible with management interfaces with Maestro? 

[Lari_Luoma]

This sounds like it, but the definitive answer should come from R&D. @Anatoly 

[Derrick_Durbin]

Any word on this being updated in the R81.10 admin guide?

[Ricki_Juntak]

Hi Wolfgang,

Can we use same interface management for different security group, can you share the document?

like example: eth1Mgmt1 and eth2Mgmt1 we can use for Security Group and Security Group_VSX,

or we must use one interface Mgmt only for one Sec.Group cannot share interface with another Security Group, please share document.

Thank you

[Nir_Shamir]

Hi, 

Yes of course. this is the best practice configuring multiple SG's on the same Maestro deployment.

there's no specific document apart from the admin guide from what I know.

for each security group you create you add the same Management interfaces to it.

you just need to make sure all the security groups use the same management network.

if you need to use different management networks then you need to configure different management interfaces to each security group.

[Ricki_Juntak]

Thank you  Shamir.

but another think when one interface have issue, make issue for all sec.group (issue interface mgmt)

[Nir_Shamir]

You are right. that's why we use MAGG for redundancy.

but it's your call. 

I did many deployments like this and never had issues.

[Ricki_Juntak]

OK Shamir,

Thank you