Configure the IPSec Tunnel in Aryaka SmartConnect

Log in to MyAryaka and navigate to the SmartConnect site for which you want to deploy Prisma Access.
Click
Edit Site
, then select
Cloud Security
from the list of
Advanced Settings.

Enter information for the remote network tunnel.
Enter the following settings:
Select
Palo Alto
in the
Cloud Connector Vendor
field.
Enter the
Service IP Address
for the remote network tunnel from Prisma Access in the
Primary Tunnel
Tunnel Destination
field.
Enter the PSK value from the Prisma Access IKE gateway in the
Tunnel Settings
Shared Key
field.
Enter a FQDN for the Aryaka Network Access Point (ANAP), if the IP address of the M1/M2 interface is dynamic.
Select
All Internet Traffic
in the
Traffic Forwarding
field.

After you choose to forward all internet traffic to Prisma Access, a default rule named
DEFAULT INTERNET
is inserted in the Route Controller, in the
Default Routes
section. The following screenshot shows the traffic forwarding settings.

(
Optional
) If you choose to forward only specific internet traffic to Prisma Access, program appropriate routes in the Router Controller section.
Aryaka recommends that you edit Default Routes and not override routes to control forwarding. Override routes take precedence over any Aryaka-destined traffic and may accidentally cause site-to-site traffic to be routed to Prisma Access.
The following figures provide screenshots of the Route Controller feature.



Check the status of the tunnels.
To check the status from the Aryaka Cloud Security Connector, click the
Status
tab. Aryaka uses Dead Peer Detection (DPD) to determine the availability of the tunnel.

To check the status from
Prisma Access (Cloud Management)
, select
Manage
Service Setup
Remote Networks
Remote Networks
to verify that the remote network has been successfully deployed.