How to change the Circuit Label for an interface on Prisma SD-WAN?

• To update the circuit label for public or private connection.
• A circuit label is a type of network link that is necessary to establish a VPN connection.
• Any modifications to the Circuit Label may cause the VPN tunnels to bounce/flap.
• The update must be performed during a planned maintenance interval.

• Prisma SD-WAN
• Circuit label
• VPNs

1. Login to Prisma SDWAN Portal
2. Click on Configuration > Prisma SDWAN > Branch Sites > Click on the site to be re-configured
3. Now Click on the Circuit that needs to be modified
4. Update the circuit information (Refer screenshot below)

5. Now click on the "Ion Device" under "Devices"
6. Click on the Interfaces
7. Select the interface to be re-configured and remove the circuit label.

8. Now go back to the "Circuit Information" under "Site Summary" page
9. Change parameters at site label to that circuit.

10. Navigate back to the parent interface under Devices > Interfaces
11. Re-apply the label under Circuits.

Troubleshooting: Security Binding Errors

If you encounter an error stating: SPECIFIED WAN INTERFACE IS USED IN THE SECURITY ZONES, follow these remediation steps:

1. Interface Level:
a. Navigate to Network Settings.
b. Select the interface attached to the security zone.
c. Change the Security Zone setting to None.

2. Advanced Site Level (If error persists):
a. Navigate to the Branch Site.
b. Go to Advanced > Bind Security Zones > Devices.
c. Manually remove the interface from the security bindings.

3. Post-Update: Once the circuit label is successfully updated, remember to re-attach the Security Zones to the interface.
Please note: If the devices are configured in HA (High Availability), perform the same steps on both devices.

Note: The above procedure will cause all VPN tunnels to be wiped off and recreate again