Use Cases for SD-WAN Capabilities in Cisco Secure Firewall
Is this content helpful?
Thank you for your feedback. Your response has been recorded.
AI responses are currently only available to logged in users. Log in
Only ask questions about this document. To ask questions about this product as a whole, go to Technical Documentation .
Suggestions
Sorry, we couldn't generate a response for this query.
Use Cases for SD-WAN Capabilities in Cisco Secure Firewall
Updated: February 5, 2026
Want to summarize with AI?
Log inProvides instructions to configure an ECMP zone for DVTI-based VPNs to distribute traffic and optimize connectivity in Firewall Management Center (FMC).
Configure ECMP on the primary and secondary static VTI interfaces on the branch node for link redundancy and for load balancing the VPN traffic.
Choose Devices > Device Management, and edit the Threat Defense device (NGFWBR1).
Click the Routing tab on the interface view of NGFWBR1.
Click ECMP.
Click Add.
In the Add ECMP box, enter a name, ECMP-VTI for the ECMP zone.
To associate interfaces, select the interfaces outside_static_vti_1 and outside_static_vti_2 under the Available Interfaces box, and then click Add.
Click OK.
The ECMP page now displays the newly created ECMP zone.
Click Save.
Need help?
(Requires a Cisco Service Contract)
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.