Configure Internet Ports
Table of Contents
Expand all | Collapse all
-
-
- Add a Branch
- Add a Data Center
- Add a Branch Gateway
- Configure Circuits
- Configure Internet Circuit Underlay Link Aggregation
- Configure Private WAN Underlay Link Quality Aggregation
- Configure Circuit Categories
- Configure Device Initiated Connections for Circuits
- Add Public IP LAN Address to Enterprise Prefixes
- Manage Data Center Clusters
- Configure a Site Prefix
- Configure a DHCP Server
- Configure NTP for Prisma SD-WAN
- Configure the ION Device at a Branch Site
- Configure the ION Device at a Data Center
- Switch a Site to Control Mode
- Allow IP Addresses in Firewall Configuration
-
- Configure a Controller Port
- Configure Internet Ports
- Configure WAN/LAN Ports
- Configure a Loopback Interface
- Configure a PoE Port
- Configure and Monitor LLDP Activity and Status
- Configure a PPPoE Interface
- Configure a Layer 3 LAN Interface
- Configure Application Reachability Probes
- Configure a Secondary IP Address
- Configure a Static ARP
- Configure a DHCP Relay
- Configure IP Directed Broadcast
- VPN Keep-Alives
-
- Configure Prisma SD-WAN IPFIX
- Configure IPFIX Profiles and Templates
- Configure and Attach a Collector Context to a Device Interface in IPFIX
- Configure and Attach a Filter Context to a Device Interface in IPFIX
- Configure Global and Local IPFIX Prefixes
- Flow Information Elements
- Options Information Elements
- Configure the DNS Service on the Prisma SD-WAN Interface
- Configure SNMP
-
-
- Prisma SD-WAN Branch Routing
- Prisma SD-WAN Data Center Routing
-
- Configure Multicast
- Create a WAN Multicast Configuration Profile
- Assign WAN Multicast Configuration Profiles to Branch Sites
- Configure a Multicast Source at a Branch Site
- Configure Global Multicast Parameters
- Configure a Multicast Static Rendezvous Point (RP)
- Learn Rendezvous Points (RPs) Dynamically
- View LAN Statistics for Multicast
- View WAN Statistics for Multicast
- View IGMP Membership
- View the Multicast Route Table
- View Multicast Flow Statistics
- View Routing Statistics
- Prisma SD-WAN Incident Policies
-
- Prisma SD-WAN Branch HA Key Concepts
- Configure Branch HA
- Configure HA Groups
- Add ION Devices to HA Groups
- View Device Configuration of HA Groups
- Edit HA Groups and Group Membership
-
- Configure Branch HA with Gen-1 Platforms (2000, 3000, 7000, and 9000)
- Configure Branch HA with Gen-2 Platforms (3200, 5200, and 9200)
- Configure Branch HA with Gen-2 Embedded Switch Platforms (1200-S or 3200-L2)
- Configure Branch HA for Devices with Software Cellular Bypass (1200-S-C-5G)
- Configure Branch HA for Platforms without Bypass Pairs
- Prisma SD-WAN Clarity Reports
- Prisma SD-WAN Incidents and Alerts
Configure Internet Ports
Let us learn to configure internet ports.
Where Can I Use
This? | What Do I
Need? |
---|---|
|
|
- From internet ports, select a port pair.
- To enable the interface, forAdmin Up, selectYes.
- (Optional)Enter a description.
- ForInterface Type, selectPort.
- ForUse these Ports For, selectInternet.Alternatively, you can selectPrivate WANforUse these Ports Forto configure a WAN port for a Private WAN circuit.
- ForScope, toggleLocalorGlobal.The default isLocal.If the scope is local, the route is not advertised to the data center.If the scope is global, the route is advertised to the data center.
- This setting is applicable only to branch sites. It is not applicable to data center sites.
- Configuring a global static route will advertise the destination IP/prefix to other sites automatically.
- ForCircuit Label, select the circuit label that corresponds to your internet connection for this site.
- SelectEnable IPv6 On This Interfaceto configure IPv6.
- ForIPv6 Configuration, selectAutoConforStatic.Autoconfindicates the Global IP address is derived using stateless address autoconfiguration (SLAAC).ChooseStaticif the IP address is fixed and is manually assigned. Additionally specify theIPv6 Address/Mask,Default Gateway (IPv6), andDNS server(s)(IPv6).
- ForIPv4 Configuration, selectDHCPorStatic.ChooseDHCPif the IP address is dynamically assigned.ChooseStaticif the IP address is fixed and is manually assigned. Additionally specify theIP Address/Mask,Default Gateway, andDNS server(s).
- In Advanced Options,(optional)specifyMAC,IP MTU,External NAT Address and Port (IPv4),External NAT Address and Port (IPv6),andPhysicalfrom the available range.IP MTU value should be at least 1280 for IPv6. If it is less than 1280, IPv6 cannot be enabled.
- ClickSave Port.The ION device inherently hardens all the ports designated asInternet. You can access only UDP 4500, 500 (ISAKMP), and ESP ports. The utilization of UDP port 500 (ISAKMP) is exclusively reserved for standard VPNs. Configure the ports accordingly to avoid automatic rejection of requests. The ION device blocks any unsolicited incoming internet traffic.