Additional ECMP Settings

Let us learn more about the additional ECMP settings.
After you complete the basic configurations of ECMP, there are a few additional ECMP-related settings. Follow the sections to learn about each.

ECMP Region Location Detection

The CloudBlade API determines the country, and the local language support for the branch via the location. Wherever possible, it will connect that branch to the appropriate Prisma Access region with the language support for the country that the branch is in.
The region needs to be changed manually to a desired region, as shown below.

ECMP Bandwidth Detection

ECMP uses the circuit bandwidth to automatically set the Prisma Access bandwidth. To override this behavior, adjust the bandwidth for ECMP accordingly.

ECMP Configuration for a Single Link

Some organizations that plan on having two or more connections to a branch Prisma SD-WAN ION device can pre-configure ECMP with only a single link to a device. When configuring ECMP on a single link, the following notes/restrictions will apply.
  • The link will appear as a non-ECMP link in Prisma Access.
  • When a second link is configured/enabled for Prisma Access, the site will automatically enable ECMP with symmetric return in Prisma Access.

ECMP Branches with High-Availability

The CloudBlade also supports High-Availability designs, while allowing for licenses to be consumed by the Primary/Active Prisma SD-WAN ION device, while the backup Prisma SD-WAN ION device does not consume a license to Prisma Access.
To enable ECMP HA licensing, under the PRIMARY/ACTIVE Prisma SD-WAN ION device, enable the following
tag as shown.
This signals to the CloudBlade to replicate the Standard VPN tunnels to Prisma Access to the backup/secondary unit. In the event of a changeover to the secondary Prisma SD-WAN ION device, the tunnels are already configured, but do not consume licensing.

ECMP Site-Level Interface Tags

As auto region selection and the CloudBlades are not inter-operable, for each link under the ECMP bundle/region, the local interface tags must also be applied as described in the previous section.

Recommended For You