Additional ECMP Settings
Let us learn more about the additional ECMP settings.
After you complete the basic configurations
of ECMP, there are a few additional ECMP-related settings. Follow
the sections to learn about each.
ECMP Region Location Detection
The CloudBlade
API determines the country, and the local language support for the branch
via the location. Wherever possible, it will connect that branch
to the appropriate Prisma Access region with the language support
for the country that the branch is in.
The
region needs to be changed manually to a desired region, as shown
below.
ECMP Bandwidth Detection
ECMP uses the
circuit bandwidth to automatically set the Prisma Access bandwidth. To
override this behavior, adjust the bandwidth for ECMP accordingly.
ECMP Configuration for a Single Link
Some
organizations that plan on having two or more connections to a branch Prisma
SD-WAN ION device can pre-configure ECMP with only a single link
to a device. When configuring ECMP on a single link, the following
notes/restrictions will apply.
- The link will appear as a non-ECMP link in Prisma Access.
- When a second link is configured/enabled for Prisma Access, the site will automatically enable ECMP with symmetric return in Prisma Access.
ECMP Branches with High-Availability
The
3.1.1 CloudBlade version also supports High-Availability designs,
while allowing for licenses to be consumed by the Primary/Active
Prisma SD-WAN ION device, while the backup Prisma SD-WAN ION device
does not consume a license to Prisma Access.
To enable ECMP
HA licensing, under the PRIMARY/ACTIVE Prisma SD-WAN ION device,
enable the following
prisma_ha_primary
tag as shown.
This
signals to the CloudBlade to replicate the Standard VPN tunnels
to Prisma Access to the backup/secondary unit. In the event of a
changeover to the secondary Prisma SD-WAN ION device, the tunnels
are already configured, but do not consume licensing.
ECMP Site-Level Interface Tags
As auto
region selection and 3.1.1 are not inter-operable, for each link
under the ECMP bundle/region, the local interface tags must also
be applied as described in the previous section.
prisma_region:us-east-1:us-east-charlockprisma_region:us-east-1:us-east-banyanORprisma_region:us-east-1:1prisma_region:us-east-1:2
