Configure the ION Device at a Data Center
Table of Contents
Expand all | Collapse all
-
-
- Add a Branch
- Add a Data Center
- Add a Branch Gateway
- Configure Circuits
- Configure Internet Circuit Underlay Link Aggregation
- Configure Private WAN Underlay Link Quality Aggregation
- Configure Circuit Categories
- Configure Device Initiated Connections for Circuits
- Add Public IP LAN Address to Enterprise Prefixes
- Manage Data Center Clusters
- Configure a Site Prefix
- Configure a DHCP Server
- Configure NTP for Prisma SD-WAN
- Configure the ION Device at a Branch Site
- Configure the ION Device at a Data Center
- Switch a Site to Control Mode
- Allow IP Addresses in Firewall Configuration
-
- Configure a Controller Port
- Configure Internet Ports
- Configure WAN/LAN Ports
- Configure a Loopback Interface
- Configure a PoE Port
- Configure and Monitor LLDP Activity and Status
- Configure a PPPoE Interface
- Configure a Layer 3 LAN Interface
- Configure Application Reachability Probes
- Configure a Secondary IP Address
- Configure a Static ARP
- Configure a DHCP Relay
- Configure IP Directed Broadcast
- VPN Keep-Alives
-
- Configure Prisma SD-WAN IPFIX
- Configure IPFIX Profiles and Templates
- Configure and Attach a Collector Context to a Device Interface in IPFIX
- Configure and Attach a Filter Context to a Device Interface in IPFIX
- Configure Global and Local IPFIX Prefixes
- Flow Information Elements
- Options Information Elements
- Configure the DNS Service on the Prisma SD-WAN Interface
- Configure SNMP
-
-
- Prisma SD-WAN Branch Routing
- Prisma SD-WAN Data Center Routing
-
- Configure Multicast
- Create a WAN Multicast Configuration Profile
- Assign WAN Multicast Configuration Profiles to Branch Sites
- Configure a Multicast Source at a Branch Site
- Configure Global Multicast Parameters
- Configure a Multicast Static Rendezvous Point (RP)
- Learn Rendezvous Points (RPs) Dynamically
- View LAN Statistics for Multicast
- View WAN Statistics for Multicast
- View IGMP Membership
- View the Multicast Route Table
- View Multicast Flow Statistics
- View Routing Statistics
- Prisma SD-WAN Incident Policies
-
- Prisma SD-WAN Branch HA Key Concepts
- Configure Branch HA
- Configure HA Groups
- Add ION Devices to HA Groups
- View Device Configuration of HA Groups
- Edit HA Groups and Group Membership
-
- Configure Branch HA with Gen-1 Platforms (2000, 3000, 7000, and 9000)
- Configure Branch HA with Gen-2 Platforms (3200, 5200, and 9200)
- Configure Branch HA with Gen-2 Embedded Switch Platforms (1200-S or 3200-L2)
- Configure Branch HA for Devices with Software Cellular Bypass (1200-S-C-5G)
- Configure Branch HA for Platforms without Bypass Pairs
- Prisma SD-WAN Clarity Reports
- Prisma SD-WAN Incidents and Alerts
Configure the ION Device at a Data Center
Let us learn to configure the ION at a data center.
Where Can I Use
This? | What Do I
Need? |
---|---|
|
|
As you get started to configure the ION device at the data center, you must know that the ION
3000, ION 5200, ION 7000, ION 9000 or ION 9200 provides eight 1GE ports and six 10GE
SFP+ ports for flexible configuration. Connect at least one port to the internet and
one port to peer with a network.
- Selectand select the device you wish to configure.WorkflowsDevicesClaimed
- From 1GE ports, selectPort 1.
- LeaveAdmin Upas the defaultYes.
- (Optional)Enter a name, description, and tags for this port.The Interface Type displays asPort.
- ForUse This Port For, selectConnect to Internetto enable public VPNs for a branch site.
- ForCircuit Label, select the circuit that connects to the internet.A circuit label is mandatory.
- ForIPv4 Configuration, selectDHCPorStatic.
- ChooseDHCPand enterNAT Address and Portif the IP address is dynamically assigned and if the internet port IP address is a private IP address behind a NAT firewall.
- The External NAT address should be the public IP address NAT-translated to the ION device’s IP address on this physical port.
- The External NAT port should be the External NAT IP address UDP port forwarded to UDP 4500 on the ION device’s IP address on this physical port.
- Outside of this device configuration, if you have a firewall, you must allow protocol TCP 443 and UDP 4500 in your firewall configuration.
- If the IP address is fixed and specified manually, chooseStaticand specify theIP Address/Mask,Default Gateway,DNS Servers, andSecondary IPs.
- SelectEnable IPv6 On This Interfaceto configure IPv6.
- ForIPv6 Configuration, selectAutoConforStatic.Autoconfindicates the Global IP address is derived using stateless address autoconfiguration (SLAAC).ChooseStaticif the IP address is fixed and is manually assigned. Additionally specify theIPv6 Address/Mask,Default Gateway (IPv6), andDNS server(s)(IPv6).
- InAdvanced Options,(optional)specifyMAC,IP MTU, andPhysicalfrom the available range.
- ClickSave Port.
- Proceed to configure the second port.
- LeaveAdmin Upas the defaultYes.
- (Optional)Enter a name, description, and tags for this port.TheInterface Typedisplays asPort.
- ForUse This Port For, selectPeer with a Networkto inject routes towards the core router.You may pair any non-hardware ports on the physical and virtual ION 7000 or ION 9000. However, ports 5/6 and ports 7/8 are hardware bypass port pairs, and therefore, must be configured as port pairs. These port pairs may be set to fail, open, or closed.
- ForCircuit Label, select the circuit to peer with the network.
- ForIPv4 Configuration, selectDHCPorStatic.
- InAdvanced Options,(optional)specifyMAC,IP MTU, andPhysicalfrom the available range.
- ClickSave Port.Similar to configuring ports on a physical ION 7000, configure the ports on the virtual ION device. The virtual device has one controller port and nine configurable ports to connect to the internet or peer with a network.
- Proceed to configure Routing, SNMP, Syslog Export, and NTP Client for the ION device.