Install ION 9000 in High Availability

1. Add a second ION 9000 to the data center that requires high availability (HA).
2. Use the same ports to cable the second ION 9000.
3. On the Prisma SD-WAN console, claim the ION device and assign it to the data center.
4. Configure the ION device and confirm that it can talk to the core and WAN edge routers.
   Ensure that the:

   • The IP address for the controller port is unique for each ION device. Note that the controller port can be a part of the same subnet as the first ION device.
   • The IP addresses for the core and WAN edge peering ports are unique for each ION device and their peering addresses are allocated a /29 or larger subnet block.
   • The IP addresses for the internet ports are unique for each ION device.
   • Finally, if NAT is configured, make sure that the NAT IP address or the NAT port is unique for each ION device.

   There is no additional configuration required on the second ION device, except the IP addresses. Both the ION 9000 devices peer with the same core and WAN edge routers. The second ION device inherits the same BGP configuration as the first device.

   Sample physical and logical connectivity using two ION 9000 devices is illustrated below. Although the topology shows only a single core router and WAN edge router, you may use the same connectivity model in environments where there is more than one router.

   The following image illustrates the physical connectivity for ION 9000 HA.

   The following image illustrates the logical connectivity and IP addressing for the ION 9000 HA.

   The following image illustrates the setting up BGP for ION 9000 HA.