PaloAlto Networks ION 7000, Hardware Reference Manual, Page: 29 / 30

Install the ION 7000
STEP 3 | On the Prisma SD-WAN console, claim the ION device and assign it to a data center and
configure the ION device. Verify that it can talk to the core and WAN edge routers.
Ensure the following:
• The IP address for the controller port is unique for each ION device. The controller port can
be a part of the same subnet as the first ION device.
• The IP addresses for the core and WAN edge peering ports are unique for each ION device
and their peering addresses are allocated a /29 or larger subnet block.
• The IP addresses for the internet ports are unique for each ION device.
• Finally, if NAT is configured, ensure that the NAT IP address or the NAT port is unique for
each ION device.
There is no addional configuraon required on the second ION device, except for IP
addresses. Both the ION 7000 devices peer with the same core and WAN edge routers.
The second ION device inherits the same BGP configuraon as the first device.
Sample physical and logical connecvity using two ION 7000 devices is illustrated below.
Although the topology shows only a single core router and WAN edge router, you may use the
same connecvity model in environments where there is more than one router.
The following image illustrates the physical connecvity for ION 7000 HA.
The following image illustrates the logical connecvity and IP addressing for ION 7000 HA.
ION 7000 Hardware Reference 29
©
2021 Palo Alto Networks, Inc.