Reference Deployment Datasheet
Silver Peak SDWAN & VRRP + Palo Alto Inspection & IPSEC + Cisco VRRP
This FireOwls All-CCIE Team Installation includes Palo Alto inspection of Core traffic before traversing Silver Peak SDWAN links and Palo Alto IPSEC and Cisco DMVPN links. VRRP is used for failover between Cisco and Silver Peak devices.
Integration Guidelines
 |
Traffic from the core switches towards the Palo Alto as next-hop. |
 |
Layer 3 connection between the core switches and the Silver Peak appliances, via the edge switch pair. This connection is being inspected by the Palo Alto firewalls. |
 |
Traffic from the Palo Alto firewalls to Internet and locations connected to IPSectunnels via the edge switch pair. |
 |
Internet traffic segment for this location, to be aggregated by the Internet edge routers. This includes clear text, IPSec, and Silver Peak traffic. |
 |
Silver Peak traffic traverses the point to point link between multiple remote sites. |
 |
Silver Peak SILVER-PEAK-1 currently operating in router mode, transporting traffic to other Silver Peak locations. Currently configured as VRRP primary. |
 |
Silver Peak SILVER-PEAK-2, configured in router mode. Currently as VRRP secondary. |
