PAN OS SDWAN (Configuration)

[S.Negi324206]

Hi Team,

I need to configure SD WAN for one of my customer.

They have 7 branches and 1 DC and configuring a new Paloalto Firewall on each site in HA.

What best practices steps should i follow to configure this. They will use panorama but between panorama and branch FW there is no direct connectivity as they have no MPLS.

Can I NAT panorama with public IP and make the reachbility to onboarding?

[mshekh]

Hi @S.Negi324206 ,

You may refer the below kb to configure the SD-WAN and it's mandatory requirement to have FW connected with panorama to push the SD-WAN configuration.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CpkeCAC&lang=en_US%E2%80%A...

First you have to connect FW to Panorama then you can proceed further for SD-WAN configuration.

[S.Negi324206]

Thanks for revert.

As per the document how we identify the BGP AS number for each sites in step 14

[mshekh]

Hi @S.Negi324206 ,

You can use the AS number as per your requirement.

Please refer the below link related ASN Table along with BGP configuration 

https://en.wikipedia.org/wiki/Autonomous_system_(Internet)

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004LXFCA2&lang=en_US%E2%80%A...