>
    Strata Copilot
    Strata Cloud Manager
    Focus
    Download PDF
    Focus
    1. Home
    2. SD-WAN
    3. Enable SD-WAN with Auto VPN
    4. Plan Your Topology for SD-WAN with Auto VPN
    5. Strata Cloud Manager
    Download PDF
    SD-WAN

    Strata Cloud Manager

    Table of Contents

    Strata Cloud Manager

    In strata cloud manager, create a VPN cluster to group branches and hubs that communicate with each other into a logical group.
    The SD-WAN interface profile defines the characteristics of the ISP connection, specifies the speed of links and how frequently the firewall monitors the link, and specifies the link tag. When you specify the same Link Tag on multiple links, you’re grouping (bundling) those physical links into a link bundle or fat pipe.
    1. Log in to Strata Cloud Manager.
    2. Select ConfigurationNGFW and Prisma AccessSetupAuto VPN and Add VPN Cluster.
    3. Check (enable) SD-WAN.
    4. Add the hub firewalls to the VPN cluster.
      1. Add Hub Devices to select one or more firewalls to Add as hubs.
        Up to four hubs are supported for a VPN cluster.
      2. Click the firewall in the Hub Devices list.
      3. Set the hub firewall Priority.
        Range is 1 to 4. The lower the priority value, the higher the priority and local preference. A cluster supports a maximum of four hubs. An active/passive HA pair counts as one hub. Multiple hubs can have the same priority; an HA pair must have the same priority.
      4. Select a Logical Router.
      5. (Optional) Check (enable) DIA VPN and select a DIA VPN Link Tag.
      6. Update.
      7. Repeat this step for all hub firewalls that you add to the VPN cluster.
    5. Add the branch firewalls to the VPN cluster.
      1. Add Hub Devices to select one or more firewalls to Add as hubs.
      2. Select a Logical Router.
      3. (Optional) Select a BGP Redistribution Profile.
      4. Update.
      5. Repeat this step for all branch firewalls that you add to the VPN cluster.

    © 2026 Palo Alto Networks, Inc. All rights reserved.