SD-WAN

 View Only

  • 1.  SD-WAN as Gateway Router

    Posted Nov 14, 2020 01:41 AM
    Can use single Aruba MC+SD-WAN Licenses to perform the following function

    1. WAN Loadbalancing
    2. Routing
    3. NAT
    4. VPN Connection with Third-party device
    5. Application filtering

    ------------------------------
    Dinusha Chandrasinghe - MVP | ACMP | ACSP |ACSA
    Network Engineer
    Plexus Global (Pvt) Ltd
    Colombo Sri Lanka
    +94717327420
    ------------------------------


  • 2.  RE: SD-WAN as Gateway Router

    Posted Nov 16, 2020 12:45 PM
    1. Maybe. I have TAC case open because gateway doesn't use the correct DPS rule I specified. TAC just said it's supposed to match device-level configuration first and after that the group level even though group level is at a lower priority. And of course the gateway doesn't know where the configuration came. So you need to verify your use case but in theory you should be able to load balance traffic from remote branch gateway to VPNCs in either cloud or at the DC

    2. Yes but Aruba doesn't let you redistribute 0.0.0.0/0 because of some reason which was never properly explained to me.

    3. If you do NAT on the remote gateway. 1:1 NAT pools are not supported, just NAT group of users to single IP address. NAT at the VPNC also is not probably supported at least I wasn't told how to configure that after opening a TAC ticket

    4. Yes it's possible to configure, haven't tested it though. i've used only automatic SD-WAN tunneling between Aruba devices

    5. You can configure application filterin in a security policy, but the applications you can use are not documented at least not in the Central documentation. So you have sort of guess and use trial and error. Also if you want to do per application bandwidth limits they don't bother to put them alphabetically so good luck :)
    Original Message


  • 3.  RE: SD-WAN as Gateway Router

    Posted Nov 27, 2020 07:46 PM
    Just to add some feedback regarding point number 4.

    I was able to successfully establish IKEv1 ipsec tunnel to a mikrotik router.

    Couldn't make it work with IKEv2 though, don't remember quite well what happened but I think it was something to do with certificates.

    ------------------------------
    Gaston Gabas
    ------------------------------

    Original Message


  • 4.  RE: SD-WAN as Gateway Router

    Posted Oct 11, 2024 10:27 AM

    Hi there - i'm especially interested in your experience with this technical solution. What where the resources you have used to establish this configuration? I would like to connect the SD_WAN EC to a Cisco Router via an IKEV2 IPSEC tunnel. 


    Original Message


  • 5.  RE: SD-WAN as Gateway Router

    Posted Oct 14, 2024 03:20 AM
      |   view attached

    Have a look at this document.

    It is for a CSR and a bit dated but could get you started.

    No guarantees given or implied.


    Original Message


  • 6.  RE: SD-WAN as Gateway Router

    Posted Oct 15, 2024 03:48 AM

    Jan-Willem

    Thank you – will have a look at it. If we have results – we shall update this thread.

     

    B

     

    Bart Dermul
    Kapt.
    CC V&C

    +3224410756

    Intranet

     

     

     

     

     

     




    Original Message


Related Content