Install the SD-WAN Plugin
Table of Contents
10.1
Expand all | Collapse all
-
-
- Upgrade Panorama with an Internet Connection
- Upgrade Panorama Without an Internet Connection
- Install Content Updates Automatically for Panorama without an Internet Connection
- Upgrade Panorama in an HA Configuration
- Migrate Panorama Logs to the New Log Format
- Upgrade Panorama for Increased Device Management Capacity
- Downgrade from Panorama 10.1
- Troubleshoot Your Panorama Upgrade
-
- What Updates Can Panorama Push to Other Devices?
- Schedule a Content Update Using Panorama
- Panorama, Log Collector, Firewall, and WildFire Version Compatibility
- Upgrade Log Collectors When Panorama Is Internet-Connected
- Upgrade Log Collectors When Panorama Is Not Internet-Connected
- Upgrade a WildFire Cluster from Panorama with an Internet Connection
- Upgrade a WildFire Cluster from Panorama without an Internet Connection
- Upgrade Firewalls When Panorama Is Internet-Connected
- Upgrade Firewalls When Panorama Is Not Internet-Connected
- Upgrade a ZTP Firewall
- Revert Content Updates from Panorama
-
Install
the SD-WAN Plugin
Install
the SD-WAN plugin version.
Install
the SD-WAN plugin version
on
your Panorama™ management server.
See the Palo Alto Networks Panorama Plugin
Compatibility Matrix and review the minimum PAN-OS version
required for your target SD-WAN plugin version.
- Install the SD-WAN plugin version on Panorama.For Panorama in a high availability (HA) configuration, repeat this step on the Panorama HA peer.
- SelectandPanoramaPluginsCheck Nowfor the latestsd_wanplugin version.
- DownloadandInstallthe latest version of the SD-WAN plugin.
- After the new plugin version successfully installs, view the PanoramaDashboardand in the General Information widget verify that theSD-WAN plugindisplays the SD-WAN plugin version you have installed.
- (Existing deployments only) Clear the SD-WAN cache on Panorama.This step is required for existing SD-WAN deployments that you upgrade the SD-WAN plugin to any of the following SD-WAN plugin versions.
- SD-WAN plugin 1.0.4 and later 1.0 versions
- All SD-WAN plugin 2.0 versions
- All SD-WAN plugin 2.1 versions
For new SD-WAN deployments, you do not need to clear the SD-WAN cache on Panorama if you install the Panorama plugin for SD-WAN version 2.1 on Panorama after you upgrade to PAN-OS 10.1.After successful upgrade of the SD-WAN plugin, you must clear the SD-WAN cache on Panorama for existing SD-WAN deployments only. This is required for Panorama to utilize the updated naming convention for IKE gateways and IPSec tunnels.Clearing the SD-WAN cache does not delete any existing SD-WAN configuration but modifies the IP address, tunnel, and gateway naming conventions for the new format introduced in Panorama plugin for SD-WAN version 2.1.- Clear the SD-WAN cache on Panorama.admin>debug plugins sd_wan drop-config-cache allSelect.CommitCommit to PanoramaSelectand verify that all hub and branch firewalls are included in the Push Scope.CommitPush to DevicesEdit SelectionBefore you commit and push, verify that all hub and branch firewalls are online and included in the Push Scope. If any of the branches or hubs are offline or not selected and pushed for commit, there could be connectivity issues between the hub and branch.Pushto your hub and branch firewalls.