Configure a Layer 3 LAN Interface
Table of Contents
Expand all | Collapse all
-
-
- Add a Branch
- Add a Data Center
- Add a Branch Gateway
- Configure Circuits
- Configure Internet Circuit Underlay Link Aggregation
- Configure Private WAN Underlay Link Quality Aggregation
- Configure Circuit Categories
- Configure Device Initiated Connections for Circuits
- Add Public IP LAN Address to Enterprise Prefixes
- Manage Data Center Clusters
- Configure a Site Prefix
- Configure a DHCP Server
- Configure NTP for Prisma SD-WAN
- Configure the ION Device at a Branch Site
- Configure the ION Device at a Data Center
- Switch a Site to Control Mode
- Allow IP Addresses in Firewall Configuration
-
- Configure a Controller Port
- Configure Internet Ports
- Configure WAN/LAN Ports
- Configure a Loopback Interface
- Configure a PoE Port
- Configure and Monitor LLDP Activity and Status
- Configure a PPPoE Interface
- Configure a Layer 3 LAN Interface
- Configure Application Reachability Probes
- Configure a Secondary IP Address
- Configure a Static ARP
- Configure a DHCP Relay
- Configure IP Directed Broadcast
- VPN Keep-Alives
-
- Configure Prisma SD-WAN IPFIX
- Configure IPFIX Profiles and Templates
- Configure and Attach a Collector Context to a Device Interface in IPFIX
- Configure and Attach a Filter Context to a Device Interface in IPFIX
- Configure Global and Local IPFIX Prefixes
- Flow Information Elements
- Options Information Elements
- Configure the DNS Service on the Prisma SD-WAN Interface
- Configure SNMP
-
-
- Prisma SD-WAN Branch Routing
- Prisma SD-WAN Data Center Routing
-
- Configure Multicast
- Create a WAN Multicast Configuration Profile
- Assign WAN Multicast Configuration Profiles to Branch Sites
- Configure a Multicast Source at a Branch Site
- Configure Global Multicast Parameters
- Configure a Multicast Static Rendezvous Point (RP)
- Learn Rendezvous Points (RPs) Dynamically
- View LAN Statistics for Multicast
- View WAN Statistics for Multicast
- View IGMP Membership
- View the Multicast Route Table
- View Multicast Flow Statistics
- View Routing Statistics
- Prisma SD-WAN Incident Policies
-
- Prisma SD-WAN Branch HA Key Concepts
- Configure Branch HA
- Configure HA Groups
- Add ION Devices to HA Groups
- View Device Configuration of HA Groups
- Edit HA Groups and Group Membership
-
- Configure Branch HA with Gen-1 Platforms (2000, 3000, 7000, and 9000)
- Configure Branch HA with Gen-2 Platforms (3200, 5200, and 9200)
- Configure Branch HA with Gen-2 Embedded Switch Platforms (1200-S or 3200-L2)
- Configure Branch HA for Devices with Software Cellular Bypass (1200-S-C-5G)
- Configure Branch HA for Platforms without Bypass Pairs
- Configure Branch HA in a Hybrid Topology with Gen-1 (3000) and Gen-2 (3200) Platforms
- Prisma SD-WAN Incidents and Alerts
Configure a Layer 3 LAN Interface
Learn to configure a L3 LAN interface in Prisma SD-WAN. The LAN interface's enhanced L3
capabilities allow for simplified topologies and help facilitate an improved branch HA
model.
Where Can I Use This? | What Do I Need? |
---|---|
|
|
Prisma SD-WAN extends the capabilities of
the Layer 3 LAN interface to include traffic forwarding. Release 5.1.1
and later enables you to use Layer 3 LAN interfaces for services
such as DHCP Relay, DHCP Server, SNMP
source interface, and so on. The LAN interface's enhanced Layer
3 capabilities allow for simplified topologies and help facilitate an
improved branch HA model. Layer 3 LAN interface can be configured
with a static or dynamic IP address and is used to forward traffic to
and from the LAN. Layer 3 LAN Interface now supports static routing.
When Virtual Routing and Forwarding tables (VRF) is configured
on a sub-interface:
- Select LAN type interface for branch sites.
- Select Peer with the Network for data center sites.
- Select WorkflowsDevicesClaimed Devices, select the device you want to configure.On the Basic Info screen, toggle Yes for Enable L3 Direct Private WAN Forwarding.Click Save.Select the Interfaces tab.Select a port that connects to the LAN.For Admin Up, select Yes.(Optional) Enter a Description and add Tags.Select Port as the Interface type.For Use This Port For, select LAN.Toggle Scope as Global or Local.For VRF, select Globalor any other custom VRF that is available and associated in the VRF profile. VRF Global is enabled only when the associated device supports VRF.Select Enable IPv6 On This Interface to configure IPv6.For IPv6 Configuration, select AutoConf or Static.Autoconf indicates the Global IP address is derived using stateless address autoconfiguration (SLAAC).Choose Static if the IP address is fixed and is manually assigned. Additionally specify the IPv6 Address/Mask, Default Gateway (IPv6), and DNS server(s) (IPv6).In Advanced Options, you can specify, IPv6 Prefix Distribution, for address distribution.IPv6 is supported only for Global VRF.Select IPv4 Configuration as either DHCP or Static.
- If Static is selected, enter an IP address and mask for the interface.Default Gateway and DNS server configurations are not required for LAN interfaces. This is indicated by using LAN in the Use This Port For field.Select DHCP for dynamic allocation of IP address.If DHCP Relay functions are required, then click the DHCP Relay drop-down and select Yes for Enabled.For Server IPs, add server IP addresses as required.Save Port.