Focus

SD-WAN Administrator’s Guide

Create a Default Route to the SD-WAN Interface

Table of Contents

Create a Default Route to the SD-WAN Interface

Create a default route to an SD-WAN interface you created in order to bring up the firewall.

If you are using a service route to access Panorama™, to bring up the firewall you must create a default route that points to an SD-WAN interface you created.

Auto VPN creates a virtual SD-WAN interface named sdwan.901 for DIA and creates a virtual SD-WAN interface named sdwan.902 for VPN tunnels. Auto VPN also creates its own default route that uses the sdwan.901 interface as its egress interface and uses a low metric, so that the sdwan.901 interface is preferred over the default route you created.

Log in to the Panorama Web Interface.
Select the Template you are working on.
Select NetworkVirtual Routers and select a virtual router, such as sd-wan.
Select Static Routes and Add a static route by Name.
For Destination, enter 0.0.0.0/0.
For egress Interface, select one of the logical SD-WAN interfaces you created to bring up the firewall.

The egress interface you select can be any logical SD-WAN interface except sdwan.901 or sdwan.902.
For Next Hop, select None.
For Metric, enter a value greater than 50, so that this default route is not preferred over the default route that Auto VPN creates with a low metric.
Click OK.
Select Commit and Commit and Push your configuration changes.
Commit your changes.
Repeat this task for other templates on firewalls that use a service route to access Panorama.

Configure a Virtual SD-WAN Interface

Configure SD-WAN Link Management Profiles