topic Prisma SD-WAN initial deployment - LAN port in Prisma SD-WAN Discussions

Prisma SD-WAN initial deployment - LAN port

gianlucabastia91 — Thu, 25 Apr 2024 19:28:53 GMT

Hello All,

Looking for some feedback on how to best configure our ION devices.

We have setup HA ION devices with redundant Internet and Private circuits. The issue I keep running into is the LAN port configuration doesn't seem right.

I setup a test machine and set a default route to the LAN port of the ION device so traffic passes through the box. Initially I had a default gateway on the LAN interface, but this cause traffic to go from LAN port to Controller port and out the current edge infrastructure. So, I removed the gateway and traffic was hitting the correct path policies but return traffic didn't know where to go.

So, I added a static route with next hop IP - but the traffic again hit the controller port on the way back. Switched to a next hop LAN interface, but then the traffic doesn't know where to go...

What am I doing wrong here?

Also, should the LAN interface on the HA IONs have the same IP addresses? I'm seeing conflicting documentation regarding this.

Re: Prisma SD-WAN initial deployment - LAN port

MALjaaidi — Mon, 29 Apr 2024 19:42:40 GMT

What ION devices model do you have?

It will be better if you could share simple diagram for your scenario for better understanding.

LAN interfaces on both HA IONs should have the same IP addresses.

Re: Prisma SD-WAN initial deployment - LAN port

Junedshaikh — Thu, 27 Jun 2024 15:12:03 GMT

Firmware version here plays a very important role here. Palo SDWAN solution at 6.3.x level has simplified the design a bit. As suggested a simple diagram will yield a better discussion