SD-WAN
Strata Cloud Manager
Table of Contents
Expand All
|
Collapse All
SD-WAN Docs
-
- SD-WAN Deployment Workflow
-
- Add SD-WAN Branch or Hub Firewall
- Configure Certificate-based Authentication for Strong Security
- Quickly Add Multiple SD-WAN Devices with Bulk Import
- Configure SD-WAN Devices in HA Mode
- Onboard PAN-OS Firewalls to Prisma Access for Cloud-based Security
- Plan Your Topology for SD-WAN with Auto VPN
- Create a Full Mesh VPN Cluster with DDNS Service
- Create a Static Route for SD-WAN
- Configure Advanced Routing for SD-WAN
Strata Cloud Manager
In strata cloud manager, create a VPN cluster to group branches and hubs that
communicate with each other into a logical group.
The SD-WAN interface profile defines the characteristics of the ISP
connection, specifies the speed of links and how frequently the firewall monitors
the link, and specifies the link tag. When you specify the
same Link Tag on multiple links, you’re grouping (bundling) those physical links
into a link bundle or fat pipe.
- Log in to Strata Cloud Manager.
- Select ManageConfigurationDevice SettingsAuto VPN and Add VPN Cluster.
- Check (enable) SD-WAN.
- Add the hub firewalls to the VPN cluster.
- Add Hub Devices to select one or more firewalls to Add as hubs.Up to four hubs are supported for a VPN cluster.
- Click the firewall in the Hub Devices list.
- Set the hub firewall Priority.Range is 1 to 4. The lower the priority value, the higher the priority and local preference. A cluster supports a maximum of four hubs. An active/passive HA pair counts as one hub. Multiple hubs can have the same priority; an HA pair must have the same priority.
- Select a Logical Router.
- (Optional) Check (enable) DIA VPN and select a DIA VPN Link Tag.
- Update.
- Repeat this step for all hub firewalls that you add to the VPN cluster.
- Add the branch firewalls to the VPN cluster.
- Add Hub Devices to select one or more firewalls to Add as hubs.
- Select a Logical Router.
- (Optional) Select a BGP Redistribution Profile.
- Update.
- Repeat this step for all branch firewalls that you add to the VPN cluster.