- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
11-08-2022 03:07 PM
How do I assign a SD-wan interface profile an interface in a template with 3 firewalls assigned to 3 groups based on site when each site has different speeds for each ISP? Do I have to go against palo alto recommendations and use 3 templates?
Site 1 Fiber: 250Mbps/250Mbps
Site 1 cable: 600Mbps/35Mbps
Site 2 Fiber: 200Mbps/200Mbps
Site 2 cable: 250Mbps/35Mbps
Site 3 Fiber: 500Mbps/500Mbps
Site 3 cable: 1Gbps/1Gbps
11-11-2022 02:36 PM
I can't be the only person doing this right?
09-11-2023 01:29 AM
Hello RobertAdrian,
Not sure what is the challenge here.
In the template, you have your x interfaces, for each interface you have device a sdwan interface profile.
If you have multiple site, you can make multiple template (1 for hub or for site with X ISP ....).
Or ... are you planning to do all the sites on the same template?
In this case, not possible (if you are really needing to have those values to be realistic one).
Olivier
PCSNE - CISSP
Best Effort contributor
Check out our PANCast Channel
Disclaimer : All messages are my personal ones and do not represent my company's view in any way.
09-11-2023 07:14 AM
I eventually did setup different templates for each site. However, in the end, I abandoned using PANOS SD-WAN. It was extremely unstable. Palo support worked on the issue for several weeks and was unable to find a solution, so I manually created the VPN tunnels (10 per site) and configured failover using OSPF.
Palo support suggested not using the built-in SD-WAN functionality and instead moving to Prisma SD-WAN. I choose not to move to Prisma due to the high cost.
09-26-2023 01:12 AM
Assigning SD-WAN interface profiles in a multi-site environment with varying speeds for fiber and cable connections can be managed through proper configuration in your SD-WAN controller or orchestrator. Here's a step-by-step guide:
1. **Log in to your SD-WAN Controller**: Access the SD-WAN controller interface using your administrator credentials.
2. **Navigate to Templates**:
- Find the section where you can create and manage templates for your sites.
3. **Create or Edit a Template**:
- If you have an existing template, select it. Otherwise, create a new template for your sites.
4. **Define Interface Profiles**:
- Within the template, locate the section where you can define interface profiles.
- Create profiles for different types of connections (e.g., Fiber, Cable).
5. **Assign Interface Profiles**:
- For each site, go to the settings related to the WAN interfaces.
- There should be an option to select the interface profile for each WAN link. Assign the appropriate profile based on the type and speed of the connection.
6. **Adjust Bandwidth Parameters (Optional)**:
- Some SD-WAN controllers allow you to set bandwidth thresholds for each interface. You can set these parameters based on the actual speed of the connection.
7. **Save and Apply Changes**:
- Save the template and apply it to the respective sites.
8. **Verify Configuration**:
- Once the template is applied, verify that the interface profiles are correctly assigned to the WAN interfaces at each site.
9. **Test and Monitor**:
- After applying the configuration, conduct tests to ensure that the SD-WAN is utilizing the correct profiles for each type of connection.
- Monitor performance to confirm that traffic is being properly routed based on the defined profiles.
10. **Adjust as Needed**:
- If there are any changes in the network infrastructure or connection speeds, update the interface profiles and reapply the template as necessary.
Remember, the exact steps and options may vary depending on the specific SD-WAN solution you're using. Always refer to the documentation provided by your SD-WAN vendor for precise instructions. If in doubt, consider consulting with your SD-WAN vendor's support or professional services team for guidance tailored to your specific setup.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!