I have concern in SDWAN, Kindly help out this.

rajasekark1506 — Fri, 23 Jan 2026 05:55:45 GMT

1. Currently, four tunnels (at each of the two Hubs) are used for the four IPsec tunnels between these two Hubs (based on two SDWAN circuits at each Hub). Can the four existing tunnels (labelled tunnel.50xx) at both existing hubs (CHT and ELP) be used for the new IPsec tunnels to/from Agave2?

2. Can we use IP addresses assigned directly to interface ports for the SDWAN circuits, instead of creating loopback interfaces for IKE Gateways ?

3.If there is another valid reason to use loopback interfaces instead of the IP addresses assigned to the physical interface?

4.After removing Agave2 firewall (as a branch) from SDWAN cluster and device in Panorama, and creating the necessary manual IPSec tunnels between Hubs, at what point do we create add the Agave2 back to SDWAN --> Device as a Hub, and add it to SDWAN --> Cluster?

please help me out this.

topic I have concern in SDWAN, Kindly help out this. in Advanced SD-WAN for NGFW Discussions

I have concern in SDWAN, Kindly help out this.