Prisma SD-WAN
Onboard a Non-ECMP Site
Table of Contents
Onboard a Non-ECMP Site
Onboard a non-ecmp site and assign interface level tags for non-ecmp
sites.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
|
After configuring the CloudBlade, you can integrate Prisma
SD-WAN and Prisma Access for Networks. The most basic onboarding for
the CloudBlade can be done in two simple steps:
- Configure circuit categories.
- Navigate to .From the list of Circuit Categories displayed, select the ellipsis for the category that you would like to modify.Under TAGS, apply the prisma_region:<region>:<SPN> tag to enable the circuit category for Prisma Access.
![]()
Once applied, the circuit category will reflect that it's enabled and tagged for Prisma Access.Repeat this set of steps to enable Prisma Access on the appropriate circuits.Configure site tags.- Locate a site in Prisma SD-WAN to onboard to Prisma Access by navigating to .Select a site to modify and on the Configuration screen, click the edit icon.On the Edit Site screen, select or type prisma_access in the Tags field.
![]()
Once this configuration is completed, on the next integration run, the CloudBlade will begin the onboarding process to connect the Prisma SD-WAN ION device and Prisma Access. This process takes place through one or more IPSec tunnels, depending on how many interfaces and tags are configured. This can take several integration cycles for all the tunnels to appear and be active on the Prisma SD-WAN web interface.Configure BGP- Click the extended prisma_access tag and navigate to the BGP section.You can also view or change the BGP settings for Prisma Access from the BGP section.If the site already has a Global BGP configuration, this won't change the AS parameters under .(Optional) Select Prisma SD-WAN receive Default Route from Prisma Access if needed.At this time, this can be left unchecked based on how Prisma SD-WAN instantiates the Standard VPN to Prisma Access.(Optional) Select Prisma forward received Branch Routes from Prisma SD-WAN if needed.
![]()
Assign Interface-Level Tags for Non-ECMP Sites
Tag interfaces appropriately to add them to a non-ECMP deployment for Prisma Access.- In aggregate bandwidth mode, tag the appropriate interface as prisma_region:region_name:node_name in the Tags field.In non-aggregate bandwidth mode, tag the appropriate interface as prisma_region:node_name in the Tags field.
