topic Re: PAN-OS SDWAN routing in Prisma SD-WAN Discussions

PAN-OS SDWAN routing

Tremelai — Mon, 10 Apr 2023 01:20:58 GMT

Greetings,

I’m struggling to find the most elegant solution to turning up SDWAN in a large BGP environment.

I have a MPLS mesh with two hubs where I’m attempting to add path resiliency via distributed DIA circuits. Sounds simple, BUT the MPLS cloud is connected with multiple 3rd party organizations’ connections with over 400 advertised network routes with needed resources published. The SDWAN plug-in doesn’t seem to allow dynamically learned routes to propagate onto the overlay network via the hub, other than me hand jamming those 400+ networks into the hub advertised routes section or hazarding to override the virtual router template on the hub firewall.

Any insight would be greatly appreciated !

These routes are BGP learned and are subject to change

Re: PAN-OS SDWAN routing

smorrisonwe — Sat, 27 Jan 2024 21:21:04 GMT

Did you ever get an answer to this? I got some information about using communities and redistribution rules, but it's cumbersome and best, and still requires manual configuration on a per-site basis, as well as finding the automatically created community per site. I can give you what little information I've got, or if you have something better I'd love to hear what you did.

Re: PAN-OS SDWAN routing

Tremelai — Wed, 13 Mar 2024 17:31:48 GMT

I did not. We up to a dozen branch sites, all manually configured. I wish there was an auto VPN feature, without dictating the overlay routing regime.