Saucepan

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== SFP ======
===== Overview =====

This page details Palo Alto Networks SFP/SFP+ information.

Palo Alto Networks have an official PDF that maps the PAN SKU to the Finisar equivalent [[https://live.paloaltonetworks.com/t5/Operations-Documentation/810-000096-00H-Reference-Transceiver-History/ta-p/227987|here]].

[[https://www.ad-net.com.tw/difference-between-single-mode-fiber-and-multi-mode-fiber/|This page]] gives a good overview of multi mode fibre vs single mode fibre.

[[https://www.paloaltonetworks.com/services/support/support-policies/third-party-components-support |This page]] gives Palo Alto Networks official policy on third party components.

[[https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaMCAS|This page]] gives a good overview of how to get installed SFP module information.

On PAN-OS, use this command to see information on installed transceivers.
<code>show system state filter sys.s1.p2.phy</code>



===== Multimode vs Single Mode =====
  * Multimode fiber cable has a relatively large light carrying core, usually 62.5 microns or larger in diameter. It is usually used for short distance transmissions with LED based fiber optic equipment. Single-mode fiber has a small light carrying core of 8 to 10 microns in diameter. It is normally used for long distance transmissions with laser diode based fiber optic transmission equipment.
  * Multimode cable is made of of glass fibers, with a common diameters in the 50-to-100 micron range for the light carry component (the most common size is 62.5).  POF is a newer plastic-based cable which promises performance similar to glass cable on very short runs, but at a lower cost.
  * Multimode fiber gives you high bandwidth at high speeds over medium distances. Light waves are dispersed into numerous paths, or modes, as they travel through the cable’s core typically 850 or 1300nm. Typical multimode fiber core diameters are 50, 62.5, and 100 micrometers. However, in long cable runs (greater than 3000 feet [914.4 ml), multiple paths of light can cause signal distortion at the receiving end, resulting in an unclear and incomplete data transmission.
  * Single Mode fibre cable is a single stand of glass fiber with a diameter of 8.3 to 10 microns that has one mode of transmission.  Single Mode Fiber with a relatively narrow diameter, through which only one mode will propagate typically 1310nm or 1550nm. Carries higher bandwidth than multimode fiber, but requires a light source with a narrow spectral width. Synonyms mono-mode optical fiber, single-mode fiber, single-mode optical waveguide, uni-mode fiber.
  * Single-mode fiber gives you a higher transmission rate and up to 50 times more distance than multimode, but it also costs more. Single-mode fiber has a much smaller core than multimode. The small core and single light-wave virtually eliminate any distortion that could result from overlapping light pulses, providing the least signal attenuation and the highest transmission speeds of any fiber cable type.
  * Single-mode optical fiber is an optical fiber in which only the lowest order bound mode can propagate at the wavelength of interest typically 1300 to 1320nm.


[[https://www.linkedin.com/pulse/introduction-three-cisco-sfp-module-types-teresa-huang/|SFP Overview]]

===== Terms =====
  * SFP - Small Form Pluggable
  * SFP+ - Enhanced Small Form Pluggable
  * SR - Short Reach
  * LR - Long Reach
  * XR - Extended Reach
  * CU - Copper Twinax (Also called Direct-Attach)
  * [[https://en.wikipedia.org/wiki/XFP_transceiver|XFP]] is a slightly larger form factor than the popular small form-factor pluggable transceiver, SFP and SFP+.

===== SFP+ Direct Attach =====
Also known as Direct Attach (DA), Direct Attach Copper (DAC) or 10GbE Cu SFP cables. Short Direct Attach cables use a passive twin-ax cable assembly while longer ones, sometimes called active optical cable (AOC) use short wavelength optics. Both types connect directly into an SFP+ housing. SFP+ Direct Attach has a fixed-length cable, typically 1 to 7 m (passive cables), up to 15 m (active cables), or up to 100 m in length (active optical cables). Like 10GBASE-CX4, DA is low-power, low-cost and low-latency with the added advantages of using less bulky cables and of having the small form factor of SFP+. 

I have tested Amphenol SFP+ DAC cables on PA-5220 firewalls running PANOS 8.1 and found they work fine. Vendor part number is 588680003.
===== Palo Alto Networks SFP SKU Codes =====
==== HSCI Cables ====
Palo Alto Networks offer three cables where the transceivers are bonded to the cable.
  * **PAN-QSFP28-AOC-10M** is a 10m active optical cable with two 100Gb QSFP28 transceivers bonded to it. It is for the HSCI ports of the PA-5250 and PA-5260 firewalls as these firewalls' HSCI ports are 40/100Gb QSFP28.
  * **PAN-QSFP-AOC-10M** is a 10m active optical cable with two 40Gb QSFP+ transceivers bonded to it. It is for the HSCI ports of the PA-5220 firewalls as this firewall's HSCI port is a 40Gb QSFP port
  * **PAN-SFP-PLUS-CU-5M** is a 5m twin-ax passive cable with two 10Gb SFP+ transceivers bonded to it. It is for the HSCI ports of the PA-3200 series as these firewalls' HSCI ports are SFP+.

You can also buy the transceivers without the cables and attached a cable of the correct length. However, this is more expensive than buying the bonded cable when considering QSFP/QSFP28.

For HA2 connections, a "Cat 6" or "Cat 6a" Ethernet cable may suffice for the HA2 link requirement. Remember, "Cat 6a" can support 10Gbs. The PA-5200 series of Palo Alto Networks firewalls support 10Gbps on their Ethernet ports.


==== SFP Types ====

  * 1 Gbit/s multi-mode fiber, LC connector, with black or beige extraction lever
  * *  **SX** – 850 nm, for a maximum of 550 m at 1.25 Gbit/s (gigabit Ethernet). Other multi-mode SFP applications support even higher rates at shorter distances.
  * 1.25 Gbit/s multi-mode fiber, LC connector, extraction lever colors not standardised
  * * **SX+/MX/LSX** (name dependent on manufacturer) – 1310 nm, for a distance up to 2 km. Not compatible with SX or 100BASE-FX. Based on LX but engineered to work with a multi-mode fiber using a standard multi-mode patch cable rather than a mode-conditioning cable commonly used to adapt LX to multi-mode.
  * 1 to 2.5 Gbit/s single-mode fiber, LC connector, with blue extraction lever
  * * **LX** – 1310 nm, for distances up to 10 km (originally, LX just covered 5 km and LX10 for 10 km followed later)
  * * **EX** – 1310 nm, for distances up to 40 km
  * * **ZX** – 1550 nm, for distances up to 80 km (depending on fiber path loss), with green extraction lever (see GLC-ZX-SM1)
  * * **EZX** – 1550 nm, for distances up to 160 km (depending on fiber path loss)



^ Type ^ Description ^ PAN Part ^ Pan Description ^ Supported Models ^ Finisar Part # ^ nm ^ Extraction Lever Shape ^ Extraction Lever Colour ^ Finisar Overview ^ Product Specification ^ 
| 1000Base-T| RJ-45 version| PAN-SFP-CG or PAN-SFP-CG-AO| SFP form factor, 1Gb copper transceiver, 100m over Cat5 RJ-45, IEEE 802.3ab 1000BASE-T compliant| PA-7000 Series, PA-5000 Series, PA-5200 Series, PA-4000 series, PA-3000 Series, PA-3200 Series, PA-2000 Series, PA-800 Series| FCLF8522P2BTL / FCLF-8521-3 | N/A| N/A| N/A| | [[https://www.finisar.com/sites/default/files/downloads/finisar_fclf852xp2btl_1000base-t_rohs_compliant_copper_sfp_transceiver_product_specification_0.pdf|Specification]][[https://www.finisar.com/sites/default/files/downloads/finisar_fclf-8520-3_fclf-8521-3_1000base-t_copper_sfp_optical_transceiver_productspecreve1.pdf|Specification]] |
| 100BASE-FX | 100Mbps transceiver for the maximum distance of  |  PAN-SFP-100BASE-FX | SFP form factor, 100BASE-FX 100Mbps transceiver, 2Km reach, 62.5µ/125µ MMF, duplex LC, IEEE 802.3 clause 38 1000BASE-LX compliant | PA-200R Series |  | |  |  | | |
| 1000Base-SX | Multimode fiber for the maximum distance of 550 m | PAN-SFP-SX | SFP form factor, SX 1Gb optical transceiver, 550m reach on OM2 MMF, duplex LC, IEEE 802.3z 1000BASE-SX compliant | PA-7000 Series, PA-5000 Series, PA-5200 Series, PA-4000 series, PA-3000 Series, PA-3200 Series, PA-2000 Series, PA-800 Series |  | |  |  | | |
| 1000Base-LX | Single-mode fiber for the maximum distance of 10 km | PAN-SFP-LX | SFP form factor, LX 1Gb optical transceiver, 10Km reach, SMF, duplex LC,  IEEE 802.3ab 1000BASE-LX compliant | PA-7000 Series, PA-5000 Series, PA-5200 Series, PA-4000 series, PA-3000 Series, PA-3200 Series, PA-2000 Series, PA-800 Series| FTLF1318P3BTL| 1320nm| Round| Blue| [[https://www.finisar.com/optical-transceivers/ftlf1318p3btl|Overview]]| [[https://www.finisar.com/sites/default/files/downloads/finisar_ftlf1318p3btl_industrial_temp_1.25g_rohs_compliant_long_wavelength_sfp_transceiver_productspecrevb2.doc.pdf|Specification]] |
| 1000Base-ZX| Single-mode fiber for the maximum distance of 80 km| PAN-SFP-ZX| SFP form factor, ZX 1Gb optical transceiver, 80Km reach, SMF, duplex LC| PA-7000 Series, PA-5000 Series, PA-5200 Series, PA-4000 series, PA-3000 Series, PA-3200 Series, PA-2000 Series, PA-800 Series|  | |  | |  | |

==== SFP+ Types ====

^ Type ^ Description ^ PAN Part ^ Pan Description ^ Supported Models ^ Finisar Part # ^ nm ^ Extraction Lever Shape ^ Extraction Lever Colour ^ Finisar Overview ^ Product Specification ^
| 10GBASE-SR| Multimode fiber for the maximum distance of 300 m| PAN-SFP-PLUS-SR| SFP+ form factor, SR 10Gb optical transceiver, short reach 300m, OM3 MMF, duplex LC, IEEE 802.3ae 10GBASE-SR compliant| PA-7000 series, PA-5450, PA-5200 Series, PA-5060, PA-5050, PA-3200 Series, PA-3060, PA-850| FLTX8574D3BCL| 850nm| Flat| Beige| [[https://www.finisar.com/optical-transceivers/ftlx8574d3bcl-0|Overview]]| [[https://www.finisar.com/sites/default/files/downloads/finisar-ftlx8574d3bcl-10gbase-sr_sw-400m-multimode-datacom-sfp-transceiver-product-specification-revb.pdf|Specification]]|
| 10GBASE-LR| Single-mode fiber for the maximum distance of 10 km| PAN-SFP-PLUS-LR| SFP+ form factor, LR 10Gb optical transceiver, long reach 10Km, SMF, duplex LC, IEEE 802.3ae 10GBASE-LR compliant| PA-7000 series, PA-5450, PA-5200 Series, PA-5060, PA-5050, PA-3200 Series, PA-3060, PA-850| FTLX1471D3BCL| 1310nm| Flat| Blue| [[https://www.finisar.com/optical-transceivers/ftlx1475d3bcl|Overview]]| [[https://www.finisar.com/sites/default/files/downloads/finisar_ftlx1471d3bcl_rohs-6_compliant_10gbs_10km_single_mode_datacom_sfp_transceiver_product_specification_0.pdf|Specification]]|
| 10GBASE-ER| Single-mode fiber for the maximum distance of 40 km| PAN-SFP-PLUS-ER| SFP+ form factor, ER 10Gb optical transceiver, extended reach 40Km, SMF, duplex LC, IEEE 802.3ae 10GBASE-ER compliant| PA-7000 series, PA-5450 (NC only), PA-5200 Series, PA-5060, PA-5050, PA-3200 Series, PA-3060, PA-850;| | | | | | |
| 10GSFP+Cu| Direct Attach cable - 5 Metres| PAN-SFP-PLUS-CU-5M| SFP+ form factor, 10Gb direct attach twin-ax passive cable with 2 transceiver ends and 5m of cable permanently bonded as an assembly, IEEE 802.3ae 10GBASE-CR compliant| PA-7000 Series, PA-5450, PA-5200 Series, PA-5060, PA-5050,PA-3200 Series PA-3060, PA-850| | | | | | |
| | 10GB copper transciever| PAN-SFP-PLUS-10GBASE-T| SFP+ form factor, 10Gb copper transceiver, 30m over Cat6a RJ-45, IEEE 802.3an 10GBASE-T compliant| PA-7050-SMC-B, PA-7080-SMC-B, PA-7000-100G-NPC-A, PA-7000-20GQXM-NPC, PA-5450 (NC only), PA-5200 Series, PA-5050, PA-5060, PA-3060, PA-850; | | | | | | |

Note: PAN-SFP-PLUS-10GBASE-T is not supported on the PA-3200 series. Its ommision from the list supported firewalls is not a typo.
==== QSFP+ Types ====
QSFP+ is 4 x 10 Gbit/s

^ Type ^ Description ^ PAN Part ^ Pan Description ^ Supported Models ^
| | Multi-mode fiber for the maximum distance of 100 m | PAN-QSFP-40GBASE-SR4 | QSFP+ form factor, 40Gb SR4 optical transceiver, short reach 100m OM3, 12 strand MPO connector, IEEE 802.3ba 40GBASE-SR4 compliant | PA-7000 Series, PA-5450, PA-5200 Series, PA-3260|
|  | Single-mode fiber for the maximum distance of 10 km | PAN-QSFP-40GBASE-LR4 | QSFP+ form factor, 40Gb LR4 optical transceiver, long reach 10Km, SMF, duplex LC, IEEE 802.3ba 40GBASE-LR4 compliant | PA-7000 Series, PA-5450, PA-5200 Series, PA-3260|
|  |  | PAN-QSFP-40GBASE-LM4 | QSFP+ form factor, 40Gb LM4 universal optical transceiver, 140m OM3 MMF, 160m OM4 MMF, 1km SMF, duplex LC, utilizes IEEE 802.3ba 40GBASE-LR4 4x10G channel plan adaptation referred to as 40GBASE-LM4 | PA-7000 Series, PA-5450, PA-5200 Series, PA-3260|
| | Single-mode fiber for the maximum distance of 40 km | PAN-QSFP-40GBASE-ER4 | QSFP+ form factor, 40Gb ER4 optical transceiver, extended reach 40Km, SMF, duplex LC, IEEE 802.3ba 40GBASE-ER4 compliant | PA-7000 Series, PA-5450, PA-5200 Series, PA-3260|
| | | PAN-QSFP28-100GBASE-BIDI | QSFP+ form factor, 100Gb Bidirectional optical transceiver, 70m reach over OM3 MMF, 100m over OM4 MMF, duplex LC| PA-7000 Series, PA-5450, PA-5250, PA-5260, PA-5280; NOTE: only models or series cited are supported, unlisted models or series are not supported |
| | | PAN-QSFP28-100GBASE-CWDM4 | QSFP28 form factor, 100Gb CWDM4 optical transceiver, 2km, SMF, duplex LC| PA-7000 Series, PA-5450, PA-5250, PA-5260, PA-5280; NOTE: only models or series cited are supported, unlisted models or series are not supported |
| | | PAN-QSFP28-100GBASE-ER4 | QSFP28 form factor, 100Gb ER4 optical transceiver, extended reach 25Km, SMF, duplex LC, IEEE 802.3ba 100GBASE-ER4 compliant| PA-7000 Series, PA-5450, PA-5250, PA-5260, PA-5280; NOTE: only models or series cited are supported, unlisted models or series are not supported |
| | | PAN-QSFP28-100GBASE-LR4 | QSFP28 form factor, 100Gb LR4 optical transceiver, long reach 10km, SMF, duplex LC, IEEE 802.3ba 100GBASE-LR4 compliant| PA-7000 Series, PA-5450, PA-5250, PA-5260, PA-5280; NOTE: only models or series cited are supported, unlisted models or series are not supported |
| | | PAN-QSFP28-100GBASE-SR4 | QSFP28 form factor, 100Gb SR4 optical transceiver, short reach 100m OM4 (70m OM3), 8/12 strand MPO, MMF, IEEE 802.3ba 100GBASE-SR4 compliant| PA-7000 Series, PA-5450, PA-5250, PA-5260, PA-5280; NOTE: only models or series cited are supported, unlisted models or series are not supported |
| Direct Attach cable - 10 Metres | 40 Gbps. 10 meter Active Optic Cable (AOC). Cable and transceivers are bonded together. | PAN-QSFP-AOC-10M | QSFP+ form factor, 40Gb active optical cable with 2 transceivers and 10m of cable permanently bonded as an assembly. | PA-7000 Series, PA-5450, PA-5200 Series, PA-3260|
| Direct Attach cable - 10 Metres | 100 Gbps. 10 meter Active Optic Cable (AOC). Cable and transceivers are bonded together. | PAN-QSFP28-AOC-10M | QSFP28 form factor, 100Gb active optical cable with 2 transceivers and 10m of cable permanently bonded as an assembly. | PA-7000 Series, PA-5450, PA-5200 Series, PA-3260|
| Direct Attach cable - 5 Metres | 100 Gbps. 15 meter direct attach passive cable (DAC). Cable and transceivers are bonded together. | PAN-QSFP28-DAC-5M | QSFP28 form factor, 100Gb direct attach passive cable with 2 transceiver ends and 5m of cable permanently bonded as an assembly, IEEE 802.3bj 100GBASE-CR4 complian | PA-7000 Series, PA-5450, PA-5200 Series, PA-3260|


==== QSFP28 Types ==== 
QSFP+ (QSFP28) = 4 x 28 Gbit/s 

^ Type ^ Description ^ PAN Part ^ Pan Description ^ Supported Models ^
| | Single-mode fiber for the maximum distance of 300 m| PAN-XFP-SR| XFP form factor, SR 10Gb optical transceiver, short reach 300m, OM3 MMF, duplex LC, IEEE 802.3ae 10GBASE-SR compliant| PA-4060|
| | Multi-mode fiber for long reach 10 km.| PAN-XFP-LR| XFP form factor, LR 10Gb optical transceiver, long reach 10Km, SMF, duplex LC, IEEE 802.3ae 10GBASE-LR compliant| PA-4060 |