Cloud Management

Connect a remote network site to Prisma Access.
Choose a
Prisma Access Location
that is close to the remote network location that you want to onboard.
When creating the IPSec tunnel, use a
Branch Device Type
of
Other Devices
.
Enter a
Static IP
address that matches the VeloCloud SD-WAN device’s IP address.
You obtain this address from the VMware SD-WAN Orchestrator.
Enter a
Pre-shared key
for symmetric authentication across the tunnel.
Choose a
Local Identification
of
None
and an
IKE Peer Identification
of
FQDN (hostname)
; then, enter an FQDN.
Make a note of the of the
Pre-Shared key
and
FQDN
that you use for the
Peer Identification
; you match these settings when you configure the VeloCloud cloud gateway.

Select
IPSec Advanced Options
and
Create New
to create a new IPSec crypto profile for the remote network tunnel using the recommended settings.

Select
IKE Advanced Options
and
Create New
to create a new IKE cryptographic profile for the remote network tunnel.
Be sure to use crypto values that are supported with Velocloud and make a note of the values you use.
Enable
IKE NAT Traversal
(Enabled by default).

Set up routing for the remote network.
Set Up
Routing and
Add
the IP subnets for Static Routing.
Add
a
Branch IP Subnet
Choose Static Routing and
Add
a subnet you have reserved for this remote network connection.

Push your configuration changes.
Return to
Manage
Service Setup
Remote Networks
and select
Push Config
Push
.

Select
Remote Networks
.

Push
your changes.
Make a note of the
Service IP
of the Prisma Access side of the tunnel. To find this address in
Prisma Access (Cloud Management)
, select
Manage
Service Setup
Remote Networks
, click the
Remote Networks
. Look for the
Service IP
field corresponding to the remote network configuration you created.