During the Zero Touch Provisioning (ZTP) process of a new ION device at a branch site, which interface ports are supported by default to request an…

During the Zero Touch Provisioning (ZTP) process, a new ION device must connect to the internet to reach the Prisma SD-WAN controller. The device is factory-configured to use specific ports for this initial DHCP request. For ION hardware models that feature a dedicated out-of-band management port (labeled 'Controller' or 'CTRL'), this port is the default. For ION models that do not have a dedicated controller port, the device defaults to using the first numbered port, which is universally labeled as Port 1 or Internet 1. This dual-approach ensures a standardized and predictable ZTP experience across the entire ION device portfolio.

A. This is incorrect as it fails to account for ION models that do not have a dedicated Controller port, for which Port 1 is used instead.

B. This is incorrect because ZTP is not enabled by default on all ports; it uses specific, designated ports for initial connectivity to ensure predictability.

D. This is incorrect because while cellular connectivity via USB is a supported option, it is not the default method for wired DHCP-based ZTP.

1. Palo Alto Networks Prisma SD-WAN Administrator's Guide: In the section "Onboard an ION Device," the guide specifies the ZTP connection requirements. It states, "For Zero Touch Provisioning, you must connect the ION device to the internet. For ION devices that have a dedicated controller port, connect the controller port to the internet. For ION devices that do not have a dedicated controller port, connect port 1/internet 1 to the internet. The ION device uses DHCP to get an IP address and then contacts the controller to get claimed." (Found under the Device Onboarding and Configuration > Onboard an ION Device section).

2. Palo Alto Networks Prisma SD-WAN Hardware Installation Guide (ION 3200 model): In the "Install the ION 3200" chapter, under the "Connect the ION 3200 to the Network for Zero-Touch Provisioning" section, the instructions state: "For ZTP, connect the CTRL port on the ION 3200 to a network that has DHCP enabled and can access the internet." This confirms the use of the dedicated controller port on models that have one.

3. Palo Alto Networks Prisma SD-WAN Hardware Installation Guide (ION 1200-S model): In the "Install the ION 1200-S" chapter, under the "Connect the ION 1200-S to the Network for Zero-Touch Provisioning" section, the instructions state: "For ZTP, connect the Internet1 port on the ION 1200-S to a network that has DHCP enabled and can access the internet." This confirms the use of the Internet1 port on models without a dedicated controller port.