Install the SD-WAN Plugin When Panorama is Internet-Connected
Table of Contents
Expand all | Collapse all
-
- Create a Link Tag
- Configure an SD-WAN Interface Profile
- Configure a Physical Ethernet Interface for SD-WAN
- Configure an Aggregate Ethernet Interface and Subinterfaces for SD-WAN
- Configure Layer 3 Subinterfaces for SD-WAN
- Configure a Virtual SD-WAN Interface
- Create a Default Route to the SD-WAN Interface
- Create a Path Quality Profile
-
- Create a SaaS Quality Profile
- Use Case: Configure SaaS Monitoring for a Branch Firewall
- Use Case: Configure a Hub Firewall Failover for SaaS Monitoring from a Branch Firewall to the Same SaaS Application Destination
- Use Case: Configure a Hub Firewall Failover for SaaS Monitoring from a Branch Firewall to a Different SaaS Application Destination
- SD-WAN Traffic Distribution Profiles
- Create a Traffic Distribution Profile
- Create an Error Correction Profile
- Configure an SD-WAN Policy Rule
- Allow Direct Internet Access Traffic Failover to MPLS Link
- Configure DIA AnyPath
- Distribute Unmatched Sessions
- Configure HA Devices for SD-WAN
- Create a VPN Cluster
- Create a Full Mesh VPN Cluster with DDNS Service
- Create a Static Route for SD-WAN
Install the SD-WAN Plugin When Panorama is Internet-Connected
Download the SD-WAN plugin in the Panorama™ management
server from the Plugins tab.
A Panorama™ management server with an SD-WAN
plugin installed is required to configure and manage an SD-WAN deployment.
When Panorama is connected to the internet, you download and install
the SD-WAN plugin directly from the Panorama web interface. The
plugin needs to be installed only on the Panorama managing your
SD-WAN firewalls, and not on the individual hub and branch firewalls.
- Log in to the Panorama Web Interface.Select PanoramaPlugins, search for the sd_wan plugin and Check Now for the most recent version of the plugin.Download and Install the SD-WAN plugin.After you successfully install the SD-WAN plugin, select Commit and Commit to Panorama.This step is required before you can commit any configuration changes to Panorama.(Management Only mode only) Enable the logging disks required to store SD-WAN monitoring data.
- M-Series Appliances—All M-Series appliances come with two pairs of 8TB logging disks in RAID 1 by default. When managing firewalls leveraging SD-WAN from Panorama in Management Only mode, you must enable the first pair of logging disk pairs to store SD-WAN monitoring data.
- Log in to the Panorama CLI.Enable the first pair of logging disk pairs included by default with your M-Series appliance.
> request system raid add A1
Verify that logging Logging Disk Pair A is Available:> show system raid detail
When the RAID set up is complete, the following response displays:Disk Pair A Available Status clean Disk id A1 Present model : ST91000640NS size : 953869 MB status : active sync
Make the logging disk pairs available for logging.- Select PanoramaManaged Collectors and edit the Log Collector.
- Select Disks and Add each array.
- Click OK to save your changes.
- Select CommitCommit to Panorama and Commit your changes.
- Select CommitPush to Devices, select the Collector Group, and Push your changes.
- Panorama Virtual Appliances—If you deployed your Panorama virtual appliance in Management Only mode, you must increase the system disk to 224GB to store SD-WAN monitoring data.
Continue to Set Up Panorama and Firewalls for SD-WAN to begin configuring your SD-WAN deployment.