Install the SD-WAN Plugin When Panorama is Internet-Connected
Table of Contents
Expand all | Collapse all
-
- Create a Link Tag
- Configure an SD-WAN Interface Profile
- Configure a Physical Ethernet Interface for SD-WAN
- Configure an Aggregate Ethernet Interface and Subinterfaces for SD-WAN
- Configure Layer 3 Subinterfaces for SD-WAN
- Configure a Virtual SD-WAN Interface
- Create a Default Route to the SD-WAN Interface
- Create a Path Quality Profile
-
- Create a SaaS Quality Profile
- Use Case: Configure SaaS Monitoring for a Branch Firewall
- Use Case: Configure a Hub Firewall Failover for SaaS Monitoring from a Branch Firewall to the Same SaaS Application Destination
- Use Case: Configure a Hub Firewall Failover for SaaS Monitoring from a Branch Firewall to a Different SaaS Application Destination
- SD-WAN Traffic Distribution Profiles
- Create a Traffic Distribution Profile
- Create an Error Correction Profile
- Configure an SD-WAN Policy Rule
- Allow Direct Internet Access Traffic Failover to MPLS Link
- Configure DIA AnyPath
- Distribute Unmatched Sessions
- Configure HA Devices for SD-WAN
- Create a VPN Cluster
- Create a Full Mesh VPN Cluster with DDNS Service
- Create a Static Route for SD-WAN
Install the SD-WAN Plugin When Panorama is Internet-Connected
Download the SD-WAN plugin in the Panorama™ management
server from the Plugins tab.
A Panorama™ management server with an SD-WAN
plugin installed is required to configure and manage an SD-WAN deployment.
When Panorama is connected to the internet, you download and install
the SD-WAN plugin directly from the Panorama web interface. The
plugin needs to be installed only on the Panorama managing your
SD-WAN firewalls, and not on the individual hub and branch firewalls.
- Select, search for thePanoramaPluginssd_wanplugin andCheck Nowfor the most recent version of the plugin.
- DownloadandInstallthe SD-WAN plugin.
- After you successfully install the SD-WAN plugin, selectCommitandCommit to Panorama.This step is required before you can commit any configuration changes to Panorama.
- (Management Only mode only) Enable the logging disks required to store SD-WAN monitoring data.
- M-Series Appliances—All M-Series appliances come with two pairs of 8TB logging disks in RAID 1 by default. When managing firewalls leveraging SD-WAN from Panorama in Management Only mode, you must enable the first pair of logging disk pairs to store SD-WAN monitoring data.
- Enable the first pair of logging disk pairs included by default with your M-Series appliance.>request system raid add A1
- Verify that loggingLogging Disk Pair AisAvailable:>show system raid detailWhen the RAID set up is complete, the following response displays:Disk Pair A Available Status clean Disk id A1 Present model : ST91000640NS size : 953869 MB status : active sync
- Make the logging disk pairs available for logging.
- Selectand edit the Log Collector.PanoramaManaged Collectors
- SelectDisksandAddeach array.
- ClickOKto save your changes.
- SelectandCommitCommit to PanoramaCommityour changes.
- Select, select the Collector Group, andCommitPush to DevicesPushyour changes.
- Panorama Virtual Appliances—If you deployed your Panorama virtual appliance in Management Only mode, you must increase the system disk to 224GB to store SD-WAN monitoring data.
- Continue to Set Up Panorama and Firewalls for SD-WAN to begin configuring your SD-WAN deployment.