Install the SD-WAN Plugin When Panorama is not Internet-Connected
Table of Contents
Expand all | Collapse all
-
- Create a Link Tag
- Configure an SD-WAN Interface Profile
- Configure a Physical Ethernet Interface for SD-WAN
- Configure an Aggregate Ethernet Interface and Subinterfaces for SD-WAN
- Configure Layer 3 Subinterfaces for SD-WAN
- Configure a Virtual SD-WAN Interface
- Create a Default Route to the SD-WAN Interface
-
- Create a Path Quality Profile
-
- Create a SaaS Quality Profile
- Use Case: Configure SaaS Monitoring for a Branch Firewall
- Use Case: Configure a Hub Firewall Failover for SaaS Monitoring from a Branch Firewall to the Same SaaS Application Destination
- Use Case: Configure a Hub Firewall Failover for SaaS Monitoring from a Branch Firewall to a Different SaaS Application Destination
- SD-WAN Traffic Distribution Profiles
- Create a Traffic Distribution Profile
- Create an Error Correction Profile
- Configure an SD-WAN Policy Rule
- Allow Direct Internet Access Traffic Failover to MPLS Link
- Configure DIA AnyPath
- Distribute Unmatched Sessions
- Configure Multiple Virtual Routers on SD-WAN Hub
- Configure HA Devices for SD-WAN
- Create a VPN Cluster
- Create a Full Mesh VPN Cluster with DDNS Service
- Create a Static Route for SD-WAN
Install the SD-WAN Plugin When Panorama is not Internet-Connected
Download the SD-WAN plugin in the Panorama™ management
server from the Palo Alto Networks Customer Support Portal.
A Panorama™ management server with an SD-WAN
plugin is required to configure and manage an SD-WAN deployment. When
Panorama is not connected to the internet, you must download the
SD-WAN plugin from the Palo Alto Networks Customer Support Portal
and upload the plugin to Panorama. The plugin needs to be installed
only on the Panorama managing your SD-WAN firewalls, and not on
the individual hub and branch firewalls.
- Log in to the Palo Alto Networks Customer Support Portal.Select UpdatesSoftware Updates, and in the Filter By drop-down select Panorama Integration Plug In.Locate and download the SD-WAN Plug-in.Log in to the Panorama Web Interface.Select PanoramaPlugins and Upload the SD-WAN plugin.Browse and locate the SD-WAN plugin you downloaded from the Customer Support Portal and click OK.Install the SD-WAN plugin.After you successfully install the SD-WAN plugin, select Commit and Commit to Panorama.This step is required before you can commit any configuration changes to Panorama.(Management Only mode only) Enable the logging disks required to store SD-WAN monitoring data.
- M-Series Appliances—All M-Series appliances come with two pairs of 8TB logging disks in RAID 1 by default. When managing firewalls leveraging SD-WAN from Panorama in Management Only mode, you must enable the first pair of logging disk pairs to store SD-WAN monitoring data.
- Log in to the Panorama CLI.Enable the first pair of logging disk pairs included by default with your M-Series appliance.
> request system raid add A1
Verify that logging Logging Disk Pair A is Available:> show system raid detail
When the RAID set up is complete, the following response displays:Disk Pair A Available Status clean Disk id A1 Present model : ST91000640NS size : 953869 MB status : active sync
Make the logging disk pairs available for logging.- Select PanoramaManaged Collectors and edit the Log Collector.
- Select Disks and Add each array.
- Click OK to save your changes.
- Select CommitCommit to Panorama and Commit your changes.
- Select CommitPush to Devices, select the Collector Group, and Push your changes.
- Panorama Virtual Appliances—If you deployed your Panorama virtual appliance in Management Only mode, you must increase the system disk to 224GB to store SD-WAN monitoring data.
Continue to Set Up Panorama and Firewalls for SD-WAN to begin configuring your SD-WAN deployment.