Onboard Branch Sites to Prisma Access

1. To onboard a site, from Strata Cloud Manager, navigate to ConfigurationOnboarding Onboard Branch SitesConfigure.
2. On Branch Site Management, select Add Prisma SD-WAN Branch Site.

3. On Step 1 Site Information, enter the basic information:

   1. Enter the Site Name for the site.
   2. Enter Description and Tags.
   3. Enable Configure as a Branch Gateway site to convert an existing branch site to a branch gateway site. This provides the policy transit and LQM server capabilities of a data center site, along with the visibility and path selection of a branch site.
   4. Verify the Static SGI value to be between 1 and 65533 for the ION-generated traffic. The Security Group Information option is enabled by default for Static tag configuration.
   5. Enter the Site address (Using address search is recommended).
   6. Enter City, State, and Countryof the site.
   7. Click Next.
4. On Step 2 Domain & Policies, select a Domain from the drop-down. Or Add a Domain or Manage a Domain.

   By default, a preset domain is displayed for a branch site.

   1. Select Associate Branch With Default Data Center Hub Clusters to associate the newly created branch with the default cluster.
      It will be checked (by default) and unchecked to choose a different cluster from the list.
   2. Configure Policies and click Next.
      Ensure that the default Path Policy Stack, Performance Policy Stack, QoS Policy Stack, Security Policy Stack, and NAT Policy Stack are selected.
5. On Step 3 WAN Circuits and Devices:

   1. Click Add Circuits to add Internet Circuits and Private WAN Circuits.
      By default, the system includes a few predefined configured circuits that you can use when configuring the site. You can edit these labels or rename any remaining categories through Circuit Categories under Stacked Policies.
   2. On the Devices tab, select Assign Devices, select from the available devices to assign or Create Device Shells to create up to two Device Shells to preprovision and assign to the Data Center site, depending on your requirement.
6. On Step 4 Prisma Access Location, select a Prisma Access Location for this site to connect to.

   For Aggregate bandwidth:

   1. Enable connection from Prisma SD-WAN Branch site to Prisma Access Location to connect to Prisma Access location, to automatically configure BGP and tunnels.
      You can uncheck the box to create a site without connecting to the Prisma Access remote network. However, you can add the Prisma Access connection later from the Branch Sites page by selecting the Connect to Prisma Access option.
   2. Select the Primary Prisma Access Location and the IPsec Termination Node.
   3. Optionally, select the Secondary Prisma Access Location and the Secondary IPsec Termination Node.

   For Site-Based License:

   1. Enable connection from Prisma SD-WAN Branch site to Prisma Access Location to connect to Prisma Access location, to automatically configure BGP and tunnels.
      You can uncheck the box to create a site without connecting to the Prisma Access remote network. However, you can add the Prisma Access connection later from the Branch Sites page by selecting the Connect to Prisma Access option.
   2. Select Site Type from the available options:
      • 25 Mbps (Very Small)
      • 50 Mbps (Small)
      • 250 Mbps (Medium)
      • 1 Gbps (Large)
      • 2.5 Gbps (X-Large)
   3. Select the Primary Prisma Access Location.
   4. Select the option Allow connection to a secondary Prisma Access Location as backup when necessary to connect to a secondary PA location for backup.
   5. Select the Secondary Prisma Access Location.
7. Save & Exit.