Integrate Prisma Access with Cisco Meraki SD-WAN

Configure Cisco Meraki SD-WAN based on the requirements mentioned above.
If you have not already, allocate bandwidth for Prisma Access locations.
Go to
Settings
Prisma Access Setup
Remote Networks
Bandwidth Management
.
Edit the
Assigned Bandwidth
for the remote network’s compute location.
Push
the changes.
Go to
Cisco Meraki Integration with Prisma Access
settings.
Select
Settings
Integrations
Third Party SD-WAN Integrations
.
Locate the
Cisco Meraki Integration with Prisma Access
application.

Contact your Palo Alto Networks account team if you don’t see this integration option.
Enter the information needed to establish a connection between Prisma Access and Cisco Meraki by editing the
Settings
.
Generate
Cisco Meraki API Key
in Cisco Meraki dashboard, and enter the key information.
Enter the
PSK Seed
, which is a string used to derive pre-shared keys (PSKs) per tunnel.
(
Optional
) Enter an FQDN IKE identifier as the
Local Identifier
in the following syntax:
name@domain.com
This identifier acts as a template to generate a unique ID per tunnel.
(
Optional
) Enter an FQDN IKE identifier different from the local identifier as the
Remote Identifier
in the following syntax:
name@domain.com
Set the
Admin State
as
Enabled
.
You can set
Admin State
in the following modes:
Enabled
: Enables the integration to discover new networks on Cisco Meraki that are eligible for tunnel formation with Prisma Access. Additionally, this verifies current configurations.
Disabled
: Disable the integration to remove all configurations created, in Prisma Access as well as in Cisco Meraki, when a connection was set up between them.
Paused
: When you pause the integration, you can no longer add new networks or remove any unconfigured networks. However, the current configurations don't change.
Check Connectivity
to verify the connection.
Save
the changes.
You can
Save
changes only after you
Check Connectivity
every time you change settings or configurations.

After you save the changes, you can see the Cisco Meraki networks eligible for tunnel formation with Prisma Access in
Discovered Sites
. Cisco Meraki networks are displayed as sites here. It might take some time to view the discovered sites.

Establish the tunnel setup between Prisma Access and Cisco Meraki devices.
View the discovered Cisco Meraki networks and their information by clicking the site count.
The integration checks every 15 minutes for new Cisco Meraki networks. You can also initiate an on-demand site discovery.
(
Optional
) Select the nearest
Prisma Access Location
for the networks.
(
Optional
) Select
IPSec Termination Node
for each site.
If you select the same Prisma Access location for multiple networks, ensure to allocate the bandwidth equally by selecting different IPSec termination nodes for the networks sharing the same Prisma Access location.
The integration assigns Prisma Access location and IPSec termination nodes automatically. However, you can choose other Prisma Access locations or IPSec termination nodes if needed.

Select the Cisco Meraki network and toggle the
Enable
option to establish a tunnel formation with Prisma Access.
Update
the changes.

You can view all the
Enabled Sites
and
Configured Sites
in the
Cisco Meraki Integration with Prisma Access
application.

Verify the changes in Prisma Access.
Go to
Settings
Prisma Access Setup
Remote Networks
.
Alternatively, you can click
Remote Networks - Cisco Meraki Integration with Prisma Access >
.
Verify the tunnel status. The integration creates remote networks automatically. Such remote networks have names in the following syntax:
AUTO-Meraki-
Network_Name

The configuration status of Cisco Meraki networks will be
In sync
.
View the IPSec Tunnel, IKE gateway, IKE Crypto profile, and IPSec Crypto profile details.
Select the remote network site to view these details.

IPSec Tunnel details:

Select
Activity
Log Viewer
Common
Audit
to view
Cisco Meraki Integration with Prisma Access
logs.
The
Destination Vendor
specifies if the changes were made in Prisma Access or in the Cisco Meraki dashboard.

(
Optional
) View errors or warnings in
Messages
.

Verify the tunnel status in the Cisco Meraki dashboard.
Log in to the dashboard, and select
Security & SD-WAN
Monitor
VPN Status
.
Check the status for non-Meraki peer.

View the logs under
Network-wide
Event Log
for non-Meraki event types.

Contact Cisco Systems support for any errors you see in the Cisco Meraki networks and dashboard.