Install the SD-WAN Plugin
Table of Contents
10.1
Expand all | Collapse all
-
-
- Upgrade Panorama with an Internet Connection
- Upgrade Panorama Without an Internet Connection
- Install Content Updates Automatically for Panorama without an Internet Connection
- Upgrade Panorama in an HA Configuration
- Migrate Panorama Logs to the New Log Format
- Upgrade Panorama for Increased Device Management Capacity
- Downgrade from Panorama 10.1
- Troubleshoot Your Panorama Upgrade
-
- What Updates Can Panorama Push to Other Devices?
- Schedule a Content Update Using Panorama
- Panorama, Log Collector, Firewall, and WildFire Version Compatibility
- Upgrade Log Collectors When Panorama Is Internet-Connected
- Upgrade Log Collectors When Panorama Is Not Internet-Connected
- Upgrade a WildFire Cluster from Panorama with an Internet Connection
- Upgrade a WildFire Cluster from Panorama without an Internet Connection
- Upgrade Firewalls When Panorama Is Internet-Connected
- Upgrade Firewalls When Panorama Is Not Internet-Connected
- Upgrade a ZTP Firewall
- Revert Content Updates from Panorama
-
Install the SD-WAN Plugin
Install
the SD-WAN plugin version.
Install
the SD-WAN plugin version
on
your Panorama™ management server.
See the Palo Alto Networks Panorama Plugin
Compatibility Matrix and review the minimum PAN-OS version
required for your target SD-WAN plugin version.
- Log in to the Panorama web interface.
- Install
the SD-WAN plugin version on Panorama.For Panorama in a high availability (HA) configuration, repeat this step on the Panorama HA peer.
- Select PanoramaPlugins and Check Now for the latest sd_wan plugin version.
- Download and Install the latest version of the SD-WAN plugin.
- After the new plugin version successfully installs, view the Panorama Dashboard and in the General Information widget verify that the SD-WAN plugin displays the SD-WAN plugin version you have installed.
- (Existing deployments only) Clear the SD-WAN
cache on Panorama.This step is required for existing SD-WAN deployments that you upgrade the SD-WAN plugin to any of the following SD-WAN plugin versions.
- SD-WAN plugin 1.0.4 and later 1.0 versions
- All SD-WAN plugin 2.0 versions
- All SD-WAN plugin 2.1 versions
For new SD-WAN deployments, you do not need to clear the SD-WAN cache on Panorama if you install the Panorama plugin for SD-WAN version 2.1 on Panorama after you upgrade to PAN-OS 10.1.After successful upgrade of the SD-WAN plugin, you must clear the SD-WAN cache on Panorama for existing SD-WAN deployments only. This is required for Panorama to utilize the updated naming convention for IKE gateways and IPSec tunnels.Clearing the SD-WAN cache does not delete any existing SD-WAN configuration but modifies the IP address, tunnel, and gateway naming conventions for the new format introduced in Panorama plugin for SD-WAN version 2.1.- Log in to the Panorama CLI.
- Clear the SD-WAN cache on Panorama.admin> debug plugins sd_wan drop-config-cache all
- Select CommitCommit to Panorama.
- Select CommitPush to DevicesEdit Selection and verify that all hub and branch firewalls are included in the Push Scope.
Before you commit and push, verify that all hub and branch firewalls are online and included in the Push Scope. If any of the branches or hubs are offline or not selected and pushed for commit, there could be connectivity issues between the hub and branch.- Push to your hub and branch firewalls.