Prisma SDWAN vION for Alibaba Cloud - Single vION Deployment

ION Devices > Unclaimed Devices > Claim the device. Claim the device and assign it to a data center site. It can take up to 10 minutes for the ION to show up in the Controller. STEP 1 | Claim the ION device by selecting Configuration > ION Devices > Unclaimed Devices > Claim the device. It transitions to an offline state while going through the claiming process. STEP 2 | Create a Data Center Site while the device is being claimed. Although this workflow depicts how to assign the vION to a data center site, you can also assign the vION to a branch site or a branch gateway site. However, Prisma SD-WAN does not support high availability for vIONs deployed at a branch site or a branch gateway site. 1. Select Configuration > Data Centers > Add Site. 2. Enter a name for the site and other site details and click Next. 3. Add an Internet Circuit in the Circuits section and click Next. 4. Assign the device to the data center by selecting Assign Devices and selecting the ION device from the list of Select Devices and Save. 21Claim the Prisma SD-WAN ION and Assign to a Data Center STEP 3 | After the device is successfully assigned, click the device name to access the device configuration. 1. Enter a Device Name. 2. Configure Port 1 by assigning the Internet WAN circuit label you created in step 2 and providing the external NAT address and port. To locate the external IP address, go to the Alibaba Cloud portal and find the Public IP address provisioned in the resource group. 3. Configure port 2 to be Admin Up and use this port to: Peer with a Network, and set for DHCP. 4. Configure a static default route pointing to the gateway of port 2 (the 1st IP address of the private subnet specified in the deployment template). 5. Switch the site to Control mode and verify the VPNs are up and active. Virtual ION on Alibaba Cloud Deployment Guide 1.0.0 22 ©2025 Palo Alto Networks, Inc.Use Alibaba Cloud Serial Console to access Virtual ION For troubleshooting and advanced access, you can connect to the vION''s console using the Alibaba Cloud ECS console. The vION reads and populates metadata from the Alibaba Cloud hypervisor, which allows it to initialize its interfaces and boot successfully. • Stack Monitoring: Monitor the stack creation progress in the Alibaba Cloud console. This process typically takes 10 to 15 minutes. • System Logs: To verify the vION has booted correctly, access the ECS instance''s system logs. A "login" message at the end of the logs indicates that the device is ready. • • Serial Console: Access the vION''s console using the Alibaba Cloud ECS console''s Serial Console. This is an important step to validate that SSH keys are dynamically set as per metadata specifications and confirm remote login access after instance provisioning. For an unclaimed device, the default credentials are elem-admin and xxxxxxxxxx. For claimed devices, use the device toolkit credentials. 23Use Alibaba Cloud Serial Console to access Virtual ION Virtual ION on Alibaba Cloud Deployment Guide 1.0.0 24 ©2025 Palo Alto Networks, Inc.">