Configure a VRF Profile in Prisma SD-WAN

1. Select ManageResourcesConfiguration ProfilesVRF to create VRF Definition and Profiles.

2. You can also create the VRF Profile from MonitorData Centers. Select a Data Centers site. On the Configuration tab, click Create Profile and follow the steps below.

3. You can also create the VRF Profile from MonitorBranch Sites. Select a Branch Sites site. On the Configuration tab, click Create Profile and follow the steps below.
4. Click Add VRF Definitions to add a VRF Definition to attach it to the VRF Profiles.

   The system generates a Global VRF Context by default, and it does not allow updating or deleting the Global VRF Context. VRF contexts segment network traffic to apply different rules for the same profile. Note that a rule with a VRF context will always take precedence over one without a VRF context.

   When the associated VRF definitions of the new profile match the default VRF context, you can switch from a default VRF Profile to a newly created one. Otherwise, you are not allowed to make changes.

   1. Enter a Name and optional a Description for VRF Definition.
   2. You can update or delete the created VRF Definition under the Action column (if you have not attached it to any of the VRF Profiles).
5. On the Profiles tab, select Create Profile to add a new VRF Profile. On the Create VRF Profile screen:

   1. Enter a Name, optional a Description, and Select VRF Definitions for the VRF Profile. Click Next to continue adding the Route Leak Rules or click Submit to stop the further configurations.
   2. On the Route Leak Rules, you can see the Route table with the existing rules if available. Click Add Route Leak Rules to create a new rule. Enter a Name, optional a Description, Source VRF, Destination VRF, and IPv4 Prefix. Click Next.

      The leaked IPv4 prefix in the route leak rule must match the prefix configured on the interface.

   3. View Summary to see the detailed information before submitting the new VRF Profile.