How to Configure Multi-Site Remote Border

Task

In this we will learn how to configure the Anchored VN and Anchoring VN so that in which multi-site remote border, all traffic for the anchored VN at each anchoring site tunnels back to a central location, allowing a single subnet to be deployed across all sites for that VN. This is actual used to send all untrusted traffic to be sent to a firewall DMZ.

In this you will create a VN for guest traffic that will be anchored at SJC01. The remote site, SJC06 will send guest traffic to the SJC01 border node.

Solution

Navigate to Design | Network Settings | Select IP Address Pools, then click Add.

Enter the following parameters for the pool:

• Name: Guest_DCLESSONS-Pool_SJC01.
• Address Space: 193.168.100.0/24
• GW: 192.168.100.1

Save your changes.

Click to SJC01 in the network hierarchy. Click Reserve, and complete the following details for the reserved pool.

• Name: Guest_DCLESSONS-Pool_SJC01_Sub
• Global Pool: Guest_DCLESSONS-Pool_SJC01
• Prefix length: /24

Create DCLESSONS-Guest as Scalable Groups by clicking to Policy | Group Based Access Control Click Create Scalable Group with Name DCLESSONS_Guest, Tag 28 | Click Save

Click to Policy | Virtual Network | Click Create Virtual Network.| Add Guest_DCLESSONS_Anchor_VN | Save

Navigate to Provision | Fabric | Select SanJose_Fabric. Select SJC01. This will be the Anchor site