Segmentation Configuration Example

Here are some configuration steps and examples which will help you to understand how to segment the network.

Create Basic VPNs

Configure basic VPNs required by Viptela devices consist of these steps:

On the vEdge router:

• Create a VPN 0 instance for the transport VPN.
• Create a VPN 512 instance for the management VPN.
• Create a VPN instance to use for routing.

On the vSmart controller:

• Create a VPN 0 instance for the transport VPN.
• Create a VPN 512 instance for the management VPN.
• Optionally, create policies to influence routing and access control within the VPN.

Full configuration example for vEdge:

system # Configure general system parameters
host-name vedge
system-ip 1.1.1.1
domain-id 1
site-id 100
vbond 10.10.10.10
!
vpn 0 # Create the tunnel interface and allow
interface ge 0/0 reachability to vSmart in transport VPN
ip address 10.10.10.11/24
tunnel-interface
color default
encapsulation ipsec
!
no shutdown
!
ip route 0.0.0.0/0 10.10.10.12
!
vpn 1 # Create new VPN, add interfaces and routing
interface ge 0/1
ip address 10.100.100.1/24
no shutdown
!
!
router
bgp 20
neighbor 10.100.100.2
no shutdown
remote-as 20
address-family ipv4_unicast
!
!
!
!
vpn 512
interface mgmt0
ip dhcp-client
no shutdown
!

Configuration on the vSmart Controller

Comment

You are will be the first.

Please login here to comment.

EMAIL SUPPORT

LOCATION

Segmentation Configuration Example