Private L2 deployment

[Jon_Woloshyn]

In this deployment model where the upstream router is the default gateway for the branch LAN, how does the ION at the branch handle an upstream failure of the router? Since the router is down, ARPs for the IP address would fail and traffic would not get switched to the ION. Does the ION respond to ARPs for the upstream gateway?

Finally, is it possible to have a bypass pair where the WAN facing interface has an IP address assigned and thus will us that IP to establish a secure fabric connection to the DC ION over the private MPLS as well as give the ability to do direct to wan L3 forwarding?

The documentation seems to suggest this: In the first scenario here.

Bypass pairs can be configured as per the following:
• Used for - Internet, Private WAN—One interface of the bypass pair is private WAN facing
and can be assigned either a static or dynamic IP address. The other interface of the pair is
connected to a LAN network.
• Used for - Private L2—One interface of the bypass pair is private WAN facing and connects to
one or more routers - Core Edge or Peer Edge, and is capable of acting as an Layer 2 interface
only. The other interface of the pair is connected to a LAN network. Static or dynamic IP
addresses cannot be assigned to this bypass pair
Prisma SD-WAN