NSF Metro ethernet link can join sd-wan ?

ilham Lv2Posted Jan-17-2025 11:47

Hi,

can metro ethernet link join SD-Wan (sangfor VPN) ? if its can, how to properly configure metro ethernet link peering can match each order ( the peering not via sangfor-vpn but metro ethernet link it self)

so that subnets server can travel via metro ethernet link.

thank you guys, hope i found the answer here

By solving this question, you may help 961 user(s).

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

Zonger Lv5Posted May-15-2025 05:56
  
Yes, Metro Ethernet links can integrate with Sangfor SD-WAN by configuring them as underlay WAN interfaces (non-VPN paths). To ensure subnets use the Metro Ethernet directly.

In Sangfor NGAF/SD-WAN add the Metro Ethernet interfaces as Physical WAN links.

Under SD-WAN > Link Quality, assign the Metro Ethernet links to a dedicated SD-WAN group.

Create Static Routes for the server subnets specifying the Metro Ethernet interface as the next hop. Please ensure bidirectional routes on both ends.

Configure Traffic Steering Policies to prioritize the Metro Ethernet group for server-subnet traffic using criteria like source/destination IPs or applications.

Disable VPN encryption for these routes by excluding the Metro links from Sangfor VPN membership to ensure traffic bypasses the VPN tunnel and uses the direct Metro underlay. Validate with traceroute and interface monitoring.

ilham Lv2Posted Feb-05-2025 19:12
  
Hi,

Is there any other answer ?
Farina Ahmed Lv5Posted Jan-20-2025 15:14
  
Yes, a Metro Ethernet link can be used to join an SD-WAN (Sangfor VPN) setup, but the key is ensuring proper routing and peering configuration between the SD-WAN and the Metro Ethernet network. The Metro Ethernet link itself can be treated as a physical connection or transport layer that carries traffic, while the SD-WAN handles routing and optimization of the data across the network.
To configure this, you would need to establish the Metro Ethernet link with IP peering between the devices at either end (such as routers or SD-WAN appliances), ensuring the IP routing (either static routes or dynamic protocols like OSPF or BGP) is configured properly so that the subnets of the servers can traverse the Metro Ethernet link. Configure appropriate VLANs and ensure the SD-WAN appliances know how to forward traffic over the Metro Ethernet link, with any necessary policies set for traffic prioritization or encryption.
fuadmahbubun Lv2Posted Jan-17-2025 14:25
  
Hi, Yes its possible, just make sure all interface that connected to metro link mark as wan attribute, so it can be used as sdwan link interface.
reroute all packet data to sdwan interface between branch.
you can share current topology so we can suggest right solution for you.

I Can Help:

Change

Moderator on This Board

1
148
3

Started Topics

Followers

Follow

917
183
94

Started Topics

Followers

Follow

Board Leaders