Configure Branch HA for Devices with Software Cellular Bypass (1200-S-C-5G)
Table of Contents
Expand all | Collapse all
-
-
- Add a Branch
- Add a Data Center
- Add a Branch Gateway
- Configure Circuits
- Configure Internet Circuit Underlay Link Aggregation
- Configure Private WAN Underlay Link Quality Aggregation
- Configure Circuit Categories
- Configure Device Initiated Connections for Circuits
- Add Public IP LAN Address to Enterprise Prefixes
- Manage Data Center Clusters
- Configure a Site Prefix
- Configure a DHCP Server
- Configure NTP for Prisma SD-WAN
- Configure the ION Device at a Branch Site
- Configure the ION Device at a Data Center
- Switch a Site to Control Mode
- Allow IP Addresses in Firewall Configuration
-
- Configure a Controller Port
- Configure Internet Ports
- Configure WAN/LAN Ports
- Configure a Loopback Interface
- Configure a PoE Port
- Configure and Monitor LLDP Activity and Status
- Configure a PPPoE Interface
- Configure a Layer 3 LAN Interface
- Configure Application Reachability Probes
- Configure a Secondary IP Address
- Configure a Static ARP
- Configure a DHCP Relay
- Configure IP Directed Broadcast
- VPN Keep-Alives
-
- Configure Prisma SD-WAN IPFIX
- Configure IPFIX Profiles and Templates
- Configure and Attach a Collector Context to a Device Interface in IPFIX
- Configure and Attach a Filter Context to a Device Interface in IPFIX
- Configure Global and Local IPFIX Prefixes
- Flow Information Elements
- Options Information Elements
- Configure the DNS Service on the Prisma SD-WAN Interface
- Configure SNMP
-
-
- Prisma SD-WAN Branch Routing
- Prisma SD-WAN Data Center Routing
-
- Configure Multicast
- Create a WAN Multicast Configuration Profile
- Assign WAN Multicast Configuration Profiles to Branch Sites
- Configure a Multicast Source at a Branch Site
- Configure Global Multicast Parameters
- Configure a Multicast Static Rendezvous Point (RP)
- Learn Rendezvous Points (RPs) Dynamically
- View LAN Statistics for Multicast
- View WAN Statistics for Multicast
- View IGMP Membership
- View the Multicast Route Table
- View Multicast Flow Statistics
- View Routing Statistics
- Prisma SD-WAN Incident Policies
-
- Prisma SD-WAN Branch HA Key Concepts
- Configure Branch HA
- Configure HA Groups
- Add ION Devices to HA Groups
- View Device Configuration of HA Groups
- Edit HA Groups and Group Membership
-
- Configure Branch HA with Gen-1 Platforms (2000, 3000, 7000, and 9000)
- Configure Branch HA with Gen-2 Platforms (3200, 5200, and 9200)
- Configure Branch HA with Gen-2 Embedded Switch Platforms (1200-S or 3200-L2)
- Configure Branch HA for Devices with Software Cellular Bypass (1200-S-C-5G)
- Configure Branch HA for Platforms without Bypass Pairs
- Prisma SD-WAN Clarity Reports
- Prisma SD-WAN Incidents and Alerts
Configure Branch HA for Devices with Software Cellular Bypass (1200-S-C-5G)
Learn how to configure branch HA for devices with software cellular bypass in
Prisma SD-WAN
.Where Can I Use
This? | What Do I
Need? |
---|---|
|
|
The example showcases two ION 1200-S-C-5G devices, representing the next
generation of software-defined enterprise technology. These devices feature switch
ports, cellular 5G/LTE technologies, and 802.1x authentication capabilities. With
the implementation of software bypass, both cellular connections can be utilized
concurrently, enabling elastic WAN network connectivity.
![](/content/dam/techdocs/en_US/dita/_graphics/uv/prisma/prisma-sd-wan/prisma-sd-wan-admin/branch-ha-cellular-software-bypass-topology-new.png)
The topology has the following features:
- The active device has one cellular network. (Cellular Internet 1)
- The backup device has one cellular network. (Cellular Internet 2).
- The ION devices operate in an active/backup configuration, and through fail-to-wire functionality, the active ION device constantly maintains complete control and utilizes the full capacity of all the WAN circuits.
- The devices establish a connection with the LAN switch through a trunk, facilitating both data connectivity and enabling High Availability (HA) via device heartbeat monitoring.
- The LAN addressing is identical on both devices, permitting only the active device to use Address Resolution Protocol (ARP) and communicate with hosts and network devices in the LAN.
- The High Availability (HA) addressing is unique, enabling the backup device to communicate with the controller through the active device for connectivity.
![](/content/dam/techdocs/en_US/dita/_graphics/uv/prisma/prisma-sd-wan/prisma-sd-wan-admin/branch-ha-ion-1200-s-c-g-configuration.png)
- Create software cellular bypass pairs between WAN and cellular interfaces of the same ION device.Software cellular bypass creates a software bridge between the ethernet and cellular interfaces of an ION device. When both the links are active, the active ION device employs a path selection algorithm to select the best path.The Ethernet link is omitted in this example as we are using the built-in cellular capabilities.
- Create a cellular bypass pair between Cellular Port and Port 4 of ION 1.
- Create a cellular bypass pair between Cellular Port and Port 4 of ION 2.
- Create physical connections between the interfaces of the active and backup ION device.
- Connect Port 4 of ION 1 to Port 1 of ION 2.
- Connect Port 4 of ION 2 to Port 1 of ION 1.
This ensures that the cellular circuits are available to both the ION devices. - Configure WAN (peer) interfaces onPort 1for each ION device.The ION devices operate in an active/backup configuration, and through fail-to-wire functionality, the active ION device constantly maintains complete control and utilizes the full capacity of all the WAN circuits. As a result, you need to configure WAN circuits on both the ION devices.The initial step is to configure a cellular bypass pair and configure a WAN port (Port 4) on each ION device. The next step is to mirror the WAN configuration on the connected WAN port (Port 1) of the other ION device.
- Configure the High Availability (HA) (Used-for-HA)interface.In this example, we are configuringSVI 130as theUsed-for-HAinterface for heartbeat exchange between the devices.The interface designated for handling High Availability (HA) will be responsible for establishing connections between the devices and the controller. Consequently, it is crucial that these interfaces possess external reachability (direct or via overlay) and are configured with DNS servers capable of resolving public addresses.
- Configure an SVI interface for LAN connectivity.In this example, we are configuringSVI 100for LAN connectivity to enable data exchange between devices.This can involve a single SVI used as a transit to a layer 3 switch below, or alternatively, you can create multiple LAN SVIs to communicate directly with different host subnets.If using a transit LAN to a layer 3 switch, you must also set up routing accordingly.
- Configure a trunk port for the LAN and HA SVIs.In this instance, we are configuring a trunk port on port 5, where both the LAN (SVI 100) and HA SVI (SVI 130) are assigned. Both the Ports 5 on the ION devices will be directly connected to the LAN switch.The embedded Layer 2 switch on the ION 1200-S and 3200 operates via Multiple Spanning Tree Protocol (MSTP) when in layer 2 mode. When integrating these switches with neighboring LAN switches, it's crucial to note that the adjacent switches should not operate using Per VLAN Spanning-Tree (PVST). Instead, they should use MSTP (which is Rapid Spanning Tree Protocol (RSTP) backwards compatible).For redundancy purposes, trunk ports can be connected to redundant switches. With the implementation of MSTP, it ensures the creation of a loop-free topology, thus maintaining network stability.
- EnableInterface trackingfor the trunk switch ports to ensure correct failover behavior if you're connecting them to a LAN switch below. Ensure that the tracking decrement value is the same as the existing device HA priority in order for the ION to decrement to zero under this failure condition. If you're connecting the ION devices back to back, this step is not required.