Connect a Single Prisma SD-WAN Site to Prisma Access
Table of Contents
Expand all | Collapse all
-
-
- Add a Branch
- Add a Data Center
- Add a Branch Gateway
- Configure Circuits
- Configure Internet Circuit Underlay Link Aggregation
- Configure Private WAN Underlay Link Quality Aggregation
- Configure Circuit Categories
- Configure Device Initiated Connections for Circuits
- Add Public IP LAN Address to Enterprise Prefixes
- Manage Data Center Clusters
- Configure a Site Prefix
- Configure a DHCP Server
- Configure NTP for Prisma SD-WAN
- Configure the ION Device at a Branch Site
- Configure the ION Device at a Data Center
- Switch a Site to Control Mode
- Allow IP Addresses in Firewall Configuration
-
- Configure a Controller Port
- Configure Internet Ports
- Configure WAN/LAN Ports
- Configure a Loopback Interface
- Configure a PoE Port
- Configure and Monitor LLDP Activity and Status
- Configure a PPPoE Interface
- Configure a Layer 3 LAN Interface
- Configure Application Reachability Probes
- Configure a Secondary IP Address
- Configure a Static ARP
- Configure a DHCP Relay
- Configure IP Directed Broadcast
- VPN Keep-Alives
-
- Configure Prisma SD-WAN IPFIX
- Configure IPFIX Profiles and Templates
- Configure and Attach a Collector Context to a Device Interface in IPFIX
- Configure and Attach a Filter Context to a Device Interface in IPFIX
- Configure Global and Local IPFIX Prefixes
- Flow Information Elements
- Options Information Elements
- Configure the DNS Service on the Prisma SD-WAN Interface
- Configure SNMP
-
-
- Prisma SD-WAN Branch Routing
- Prisma SD-WAN Data Center Routing
-
- Configure Multicast
- Create a WAN Multicast Configuration Profile
- Assign WAN Multicast Configuration Profiles to Branch Sites
- Configure a Multicast Source at a Branch Site
- Configure Global Multicast Parameters
- Configure a Multicast Static Rendezvous Point (RP)
- Learn Rendezvous Points (RPs) Dynamically
- View LAN Statistics for Multicast
- View WAN Statistics for Multicast
- View IGMP Membership
- View the Multicast Route Table
- View Multicast Flow Statistics
- View Routing Statistics
- Prisma SD-WAN Incident Policies
-
- Prisma SD-WAN Branch HA Key Concepts
- Configure Branch HA
- Configure HA Groups
- Add ION Devices to HA Groups
- View Device Configuration of HA Groups
- Edit HA Groups and Group Membership
-
- Configure Branch HA with Gen-1 Platforms (2000, 3000, 7000, and 9000)
- Configure Branch HA with Gen-2 Platforms (3200, 5200, and 9200)
- Configure Branch HA with Gen-2 Embedded Switch Platforms (1200-S or 3200-L2)
- Configure Branch HA for Devices with Software Cellular Bypass (1200-S-C-5G)
- Configure Branch HA for Platforms without Bypass Pairs
- Prisma SD-WAN Clarity Reports
- Prisma SD-WAN Incidents and Alerts
Connect a Single Prisma SD-WAN Site to Prisma Access
Learn how to integrate a single
Prisma SD-WAN
site with Prisma
Access.Where Can I Use
This? | What Do I Need? |
---|---|
|
|
Use this workflow to onboard a single
Prisma SD-WAN
site to
Prisma Access.- Configure SASE connectivity.This is a one-time activity.
- Select.ManageResourcesSASE Connectivity
- Enter anION Peering Default Local AS Number.The BGP Local AS number is defined to quickly on-board ECMP sites. This can be a 16-bit AS number, but private BGP AS number(s) are recommended.
- Specify aTunnel Inner IP Poolusing IP/Mask notation.This IP Pool should be unused or unique across the entire network and should not be used by the Palo Alto Service Infrastructure Subnet.The number of tunnels that can be created in thePrisma SD-WANFabric toPrisma Accessare directly limited by this configuration. Each tunnel will use a /31 subnet from this pool.
- (Optional)Select aSecurity Zoneto bind the tunnel(s) created in the onboarding process to the selected zone.If you don’t select a Security Zone, the created tunnels will not be bound to a security zone.
- Select.WorkflowsPrisma SD-WAN SetupBranch Sites
- ClickConnect to Prisma Accessfor the site that you want to connect toPrisma AccessunderPrisma Access Connection.
- Select aPrisma Access Location.Prisma Accessrecommends the first location in the list closest to thePrisma SD-WANsite address. The recommendation is based on the address (latitude and longitude values) entered during site creation in Prisma SD-WAN.
- Select the correspondingIPSec Termination Node.For every 1 Gbps of bandwidth allocated to aPrisma Accessregion, a new Termination Node is spun up; you can accordingly select a different termination node.
- ClickConnect Sites.You can view the status of the connection in theSASE Connectioncolumn.For eachPrisma SD-WANcircuit for a site, a corresponding tunnel toPrisma Accessis created in this process. You can have a maximum of 4 circuits connecting toPrisma Accessfor a site.
- (Optional)You can view the details of thePrisma Accesspeer by selecting.WorkflowsPrisma SD-WAN SetupBranch SitesSelect a SiteOverlay ConnectionsBranch-Standard VPN
- (Optional)To view additional information for SASE connectivity:
- Selectand select a site.WorkflowsPrisma SD-WAN SetupBranch Sites
- View details in thePrisma Access Connectivitysection.
- (Optional)ClickEditto update the service connectivity details.
- Select theActive Prisma Access Locationand/or theIPSec Termination Node.You can view theAllocated Bandwidthfor eachPrisma AccessLocation.
- ClickNextto update the remote network tunnel configuration details.
- Click the pencil icon to update the details for a tunnel.
- ClickUpdate.
Disconnect from Prisma Access
You can disconnect your site from Prisma Access. This removes the
tunnel configuration between Prisma SD-WAN and Prisma Access, but it stores SASE
Configuration objects such as PA locations and circuits for ease in
reconnection.
- Selectand select a site.WorkflowsPrisma SD-WAN SetupBranch Sites
- View details in thePrisma Access Connectivitysection.
- ClickDisconnect from Prisma Access.