Prisma SD-WAN Data Center Routing
Table of Contents
Prisma SD-WAN Data Center Routing
Learn more about the Prisma SD-WAN data center routing.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
|
Configure static and dynamic routing
on data center ION devices. The ION device supports static routing
on all its interfaces. You may configure dynamic routing only on
those interfaces of the ION device, which are configured as—Peer with
a Network or a standard VPN interface. ION devices in
data centers do not support routing on interfaces configured as Use
to Connect to Internet. Device interfaces configured
as standard VPN interfaces in data centers learn routes dynamically
from standard VPNs and advertise data center prefixes on standard
VPNs.
When you deploy the ION device in a data center, you place the
device off-path for a seamless integration with the existing environment.
The data center ION device connects with the data center core router,
and optionally, the WAN edge router. The data center ION device
only attracts the traffic destined to branches where Prisma SD-WAN
ION devices are deployed and where there is an active VPN tunnel
to that remote ION device. The data center ION device accomplishes
this by injecting more specific or preferred routes via BGP towards
the core router for Prisma SD-WAN-deployed site prefixes.
The data center ION device supports three types of peers—core,
edge, and classic. These BGP peers are contained in a single routing
domain. At a data center, configure routing per peer.
You can configure an ION device in the data center for core and
edge peering. You have to configure BGP peering information, such
as local and remote AS #, peer IP, and options like MD5 and timers
on the device. The device automatically takes care of other configurations,
such as route-map generation, updates, and filtering.
You can configure an ION device to perform classic BGP peering,
just like any other Layer 3 networking device for more complex topologies
or scenarios.
The following topologies illustrate private WAN and third-party
routing in a data center.
- Edge and CoreIn this scenario, the data center ION device peers with one or more edge BGP peers and with one or more core BGP peers.
![]()
- Core onlyIn this scenario, the data center ION device peers only with core peers. No private WAN underlay path exists for traffic to exit from the data center.
![]()
- Core and Data Center ION Device as the WAN EdgeIn this scenario, data center ION device becomes the WAN edge, and peers with the core and the PE in the provider cloud. This is equivalent to router replacement in the branch.
![]()
- Core and Standard VPN PeersIn this scenario, the data center ION device peers with core and third-party peers.
![]()
