>
    Strata Copilot
    Configure a Controller Port
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN Administrator’s Guide
    4. Prisma SD-WAN Sites and Devices
    5. Prisma SD-WAN Ports and Interfaces
    6. Configure a Controller Port
    Download PDF
    Prisma SD-WAN

    Configure a Controller Port

    Table of Contents

    Configure a Controller Port

    Controller port is by default used as source interface for controller connections and in the absence of controller port, the device picks any L3 port for controller connections.
    Where Can I Use This?What Do I Need?
    • Prisma SD-WAN (Managed by Strata Cloud Manager)
    • Prisma SD-WAN
    An ION device has one or two controller ports. You are allowed to configure two controller ports from Release 5.2.1. In a virtual interface, you can use both the controller ports to establish redundancy in controller connectivity. The controller ports can thus be in the same subnet. Controller port is by default used as source interface for controller connections and in the absence of controller port, the device automatically picks any L3 port as source interface for controller connections. If you plan to use the controller port, connect to existing LAN segment with Internet reachability.
    The ION devices which do not have a dedicated controller port, use port 1 or port 2 to a DHCP-enabled network that has access to the internet, such as an Internet Service Provider (ISP) cable modem to connect to the controller.
    1. Select ConfigurationPrisma SD-WANION DevicesClaimed, select the device you want to configure.
    2. Select the controller port.
    3. In the General section,
      1. Enter a Name and (Optional) Description, and add Tags for the port channel interface.
      2. For Admin Up, select Up.
    4. In the Network Setting section,
      1. For IPv4 Configuration, select DHCP or Static.
      Choose DHCP if the IP address is dynamically assigned.
      Choose Static if the IP address is fixed and is manually assigned. Additionally specify the IP Address/Mask, Default Gateway, and DNS server(s).
    5. Click Save.
      Similar to configuring the first controller port, configure the second controller port.

    Add a Used-for-Controller Interface

    Gen-1 ION devices, including the ION 2000, 3000, 7000, and 9000, feature a dedicated controller port designed to offer MRL connectivity, HA heartbeat exchange, and other management functions. With the release of Gen-2 ION devices, beginning with version 6.3.1, any Layer 3 interface can now be configured as a controller port, leveraging the innovative Used-for-Controller setting. This setting empowers the interface to furnish the same functionality seamlessly.
    The ION devices which do not have a dedicated controller port, use port 1 or port 2 to a DHCP-enabled network that has access to the internet, such as an Internet Service Provider (ISP) cable modem to connect to the controller.
    Prisma SD-WAN supports Used-for-controller on:
    • Main Interfaces
    • Virtual Interfaces
    1. Select ConfigurationPrisma SD-WANION DevicesClaimed, select the device you want to configure.
    2. On the device's interface configuration page, select the Interfaces+ Add Interface to add any interface.
    3. In the General section,
      1. Enter a Name and (Optional) Description, and add Tags for the port channel interface.
      2. For Admin Up, select Up.
    4. In the Network Setting section,
      1. For Interface Type, select Port.
      2. For Use This Port For, select Controller from the given list.
    5. Click Save.

    © 2026 Palo Alto Networks, Inc. All rights reserved.