Install the SD-WAN Plugin When Panorama is not Internet-Connected
Table of Contents
Expand all | Collapse all
-
- Create a Link Tag
- Configure an SD-WAN Interface Profile
- Configure a Physical Ethernet Interface for SD-WAN
- Configure an Aggregate Ethernet Interface and Subinterfaces for SD-WAN
- Configure Layer 3 Subinterfaces for SD-WAN
- Configure a Virtual SD-WAN Interface
- Create a Default Route to the SD-WAN Interface
-
- Create a Path Quality Profile
-
- Create a SaaS Quality Profile
- Use Case: Configure SaaS Monitoring for a Branch Firewall
- Use Case: Configure a Hub Firewall Failover for SaaS Monitoring from a Branch Firewall to the Same SaaS Application Destination
- Use Case: Configure a Hub Firewall Failover for SaaS Monitoring from a Branch Firewall to a Different SaaS Application Destination
- SD-WAN Traffic Distribution Profiles
- Create a Traffic Distribution Profile
- Create an Error Correction Profile
- Configure an SD-WAN Policy Rule
- Allow Direct Internet Access Traffic Failover to MPLS Link
- Configure DIA AnyPath
- Distribute Unmatched Sessions
- Configure HA Devices for SD-WAN
- Create a VPN Cluster
- Create a Full Mesh VPN Cluster with DDNS Service
- Create a Static Route for SD-WAN
Install the SD-WAN Plugin When Panorama is not Internet-Connected
Download the SD-WAN plugin in the Panorama™ management
server from the Palo Alto Networks Customer Support Portal.
A Panorama™ management server with an SD-WAN
plugin is required to configure and manage an SD-WAN deployment. When
Panorama is not connected to the internet, you must download the
SD-WAN plugin from the Palo Alto Networks Customer Support Portal
and upload the plugin to Panorama. The plugin needs to be installed
only on the Panorama managing your SD-WAN firewalls, and not on
the individual hub and branch firewalls.
- Log in to the Palo Alto Networks Customer Support Portal.
- Select UpdatesSoftware Updates, and in the Filter By drop-down select Panorama Integration Plug In.
- Locate and download the SD-WAN Plug-in.
- Log in to the Panorama Web Interface.
- Select PanoramaPlugins and Upload the SD-WAN plugin.
- Browse and locate the SD-WAN plugin you downloaded from the Customer Support Portal and click OK.
- Install the SD-WAN plugin.
- After you successfully install the SD-WAN plugin, select Commit and Commit
to Panorama.This step is required before you can commit any configuration changes to Panorama.
- (Management Only mode only) Enable the logging disks required to store
SD-WAN monitoring data.
-
M-Series Appliances—All M-Series appliances come with two pairs of 8TB logging disks in RAID 1 by default. When managing firewalls leveraging SD-WAN from Panorama in Management Only mode, you must enable the first pair of logging disk pairs to store SD-WAN monitoring data.
- Log in to the Panorama CLI.
- Enable the first pair of logging disk pairs included by default with
your M-Series appliance.
> request system raid add A1 - Verify that logging Logging Disk Pair A is
Available:
> show system raid detailWhen the RAID set up is complete, the following response displays:Disk Pair A Available Status clean Disk id A1 Present model : ST91000640NS size : 953869 MB status : active sync - Make the logging disk pairs available for logging.
-
Select PanoramaManaged Collectors and edit the Log Collector.
-
Select Disks and Add each array.
-
Click OK to save your changes.
-
Select CommitCommit to Panorama and Commit your changes.
- Select CommitPush to Devices, select the Collector Group, and Push your changes.
-
-
Panorama Virtual Appliances—If you deployed your Panorama virtual appliance in Management Only mode, you must increase the system disk to 224GB to store SD-WAN monitoring data.
-
- Continue to Set Up Panorama and Firewalls for SD-WAN to begin configuring your SD-WAN deployment.