The two site will recognize each other and build a tunnel between them per the configuration of BIO's and WAN interface labels. @10Gbps plus your regular ISP connections the hardware capacity you have will be exceeded, so you will be in unsupported land.
There are a number of options to prevent tunnels from forming between the two locations:
- Give them the same site name. That has consequences for how the remotes connect to this logical site and traffic destined for the 2nd half landing on the 1st half needs to be routed across on the LAN side
- Configure tunnel exceptions
- Don't label the new 10Gbps path or give it an unused label (avoids warnings)
With no tunnels present you can simply use it as a router interface.
Again, given the speeds you'll likely be in unsupported land. Discuss with your supplier or local Aruba SE on the best option, config details and caveats.
not 100% about the network layout, but putting a L3-Switch between the WAN interfaces and bypassing the Silver Peak for the new VLAN could be an alternative.
Original Message:
Sent: Aug 08, 2023 10:15 AM
From: James Montigny
Subject: Private connection between Silverpeak sites that currently use public Internet exclusively.
All of our sites currently establish tunnels over public internet connections and are working properly.
Many are dual-homed to multiple ISPs without issue. Tunnels are established and fail over as designed.
For the purpose of this discussion, let's assume that these are all 1Gb ISP lines and a full mesh of SDWAN tunnels.
Two specific sites require more bandwidth than we can provide over ISP connections for site-to-site bulk file transfers.
I have the ability to provide a 10Gb dark fiber connection between the two.
If I present this network to each Silverpeak's WAN interface as another .1q subinterface, will the two impacted appliances automatically recognize this as a shorter path for this specific tunnel?
Or is additional configuration needed in the underlay?