Private L2 deployment

In this deployment model where the upstream router is the default gateway for the branch LAN, how does the ION at the branch handle an upstream failure of the router? Since the router is down, ARPs for the IP address would fail and traffic would not get switched to the ION. Does the ION respond to ARPs for the upstream gateway? Finally, is it ...

Prisma SD-WAN Support for OSPF

Are there any plans to support OSPF on the LAN side in Prisma SD-WAN? Our current design has all of the sites having the core switches talk to the WAN routers via OSPF. It's going to be a lot of work if we have to migrate that to statics or BGP.

SD-WAN adjust MSS - PAN-OS

I'd like to understand if Palo Alto SD-WAN automatically changes (or can change) the MSS value in the TCP 3 way handshake. SD-WAN checks the underlaying tunnel interfaces on their MTU and applies the minimum MTU to the related SD-WAN interface. When checking an SD-WAN interface you can check the Interface MTU (in the example 1423). The "Adjust...

secure accss service course is completed but not updated

PA-SDWAN setup using MPLS & Internet links

Hi Experts, I am planning to Implement the PANOS SDWAN in our environment, having 2 DC's & 5 Branches & Multiple cloud regions(two) I have question about ISP links to use for PANOS SDWAN . Currently I am having one MPLS & one Internet link from DC to Cloud. I have more traffic volume from DC to Cloud regions. Option#1 1...

There is any way we can download pcap file from ION device to Windows Machine

There is any way we can download pcap file from ION device to Windows Machine I am using FTP in windows machine when i tried to export the file i am getting error message. file export lan4 kk.txt.pcap scp://tpi@10.159.128.12:21kex_exchange_identification: Connection closed by remote hostlost connectionexit status 1 Please share the trick to ...

Support IPv6 over SD-WAN

Hi, I am a Palo Alto newbie and working on a project to migrate from MPLS to Prisma SD-WAN and we are at the beginning stages of design. We support IPv6 to the edge today (i.e. IPv6 on servers and desktops). Is there design documentation available on how to support IPv6 over SD-WAN. Do we tunnel it inside IPv4, If out transport provider (i...

Prisma SD-WAN Event correlation and Suppression

Hello Folk, In the content training Prisma SD-WAN the right response of the question below is Suppress the alarm, but I have some doubt, and my response was to create an escalation rule and assign a highest priority to the alarms (if I'm wrong can any one explain please). Question : When the alarms need maximum visibility, what should the ...

Panos SDWAN commit error "Failed to merge autogenerated plugin config withtemplate config"

Did basic config elements configuration and struck in following commit error, "Failed to merge autogenerated plugin config withtemplate config" Followed the below url and checked the configd.log but didn't help. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004NkpCAE&lang=en_US%E2%80%A9 Below is the full error mes...

SDWAN interface configuration in template

Commit fail:Details:. Validation Error:. network -> interface -> sdwan -> units -> sdwan.100 -> interface 'ethernet1/1' is not a valid reference. network -> interface -> sdwan -> units -> sdwan.100 -> interface is invalid. Error: SD-WAN is not enabled for member interface (ethernet1/1). Error: interface configuratio...

DHCP Option Configuration

I'm looking for some assistance setting up option 160 on the DHCP scope for a #Cloudgenix site. I'm attempting to follow the guide provided by PA, but it isn't very clear. The goal is to have the option pass along a URL for VoIP phones, but I'm currently getting an error that says Custom option value is not supported". Below is the config I'm us...

Prisma SD-WAN Application Health Alerting

My company is using Palo SD-WAN ION appliances at our Branch Locations. Is it possible for us to receive alerts from Prisma when the audio / video quality on a circuit drops below a specified threshold ?

Prisma SD-WAN ION 3000 : Failover steps to perform the same

Please share me the Failover steps for Cloud Genix SD-WAN .i Could search only Configuration document not the failover steps. Please help

Direct Internet Access to bypass Secure Fabric

Hello, We're working on configuring Direct Internet Access for our VOIP subnet across multiple locations, allowing the traffic to bypass the secure fabric and go directly to the internet. However, we are unsure how to do this. Here is some information: Gateway settup on port 3 of an Ion Static route: Dest Prefix: 10.10.10.0/24 Scope: Local N...