Citrix SD-WAN

Auto Secure Peering initiated from PE appliance at DC site and branch with standalone SD-WAN SE and WANOP appliance

March 12, 2021

Contributed by:

S C

Configuration

To configure a new Premium (Enterprise) Edition appliance with auto secure peering at the DC site and Branch with Standalone SD-WAN and WANOP appliance:

PE DC appliance is in LISTEN ON mode (on port 443).
Branch standalone SD-WAN SE and WANOP is in CONNECT-TO mode.
PE DC appliance initiates automatic secure peering to Branch standalone SD-WAN SE and WANOP appliance which installs the Private CA Certs and CERT KEY Pairs and configures CONNECT-TO on the PE appliance with DC EE’s LISTEN-ON IP.

In the SD-WAN web GUI, navigate to Configuration > WAN Optimization > Secure Acceleration > Secure Peering.
Configure keystore by providing the keystore password or by disabling the keystore.
Enable Secure Peering by selecting Private CA to perform AUTOMATIC SECURE PEERING.
Click the ‘+’ icon and to add IP with username and password. After successful authentication with the remote IP and credentials provided, a request is sent to the remote machine that will install CA Certificate and the Private cert and key for itself locally on the remote machine.

Note

IP Address – IP Address of remote WANOP Standalone or Standard Edition Appliance MANAGEMENT IP.

Username – Username of remote WANOP Standalone or Standard Edition Appliance.

Password – Password of remote WANOP Standalone or Standard Edition Appliance.

After Successful Authentication, you can view Secure Peering as TRUE and the partner IP as one of the Virtual IP of the remote WANOP Standalone appliance.

localized image

Monitoring

To validate if the Private CA and Private Certificate Key pair is generated successfully, review the information below.
View Secure Partner Information on the Premium (Enterprise) Edition appliance under Monitoring > WAN Optimization > Partners page.
On partner appliance, View Secure Partner Information on the Premium (Enterprise) Edition appliance under Monitoring > Partners & Plug-ins > Secure Partners page.

Troubleshooting

View Secure Partner Success / Failure Information on the Premium (Enterprise) Edition appliance under Monitoring > WAN Optimization > Partners > Secure Partners page.
On partner appliance, view Secure Partner Information on the Premium (Enterprise) Edition appliance under Monitoring > Partners & Plug-ins > Secure Partners page.
On partner appliance, view Secure Partner Information on the Premium (Enterprise) Edition appliance under Monitoring > Appliance Performance > Logging page.

localized image

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Auto Secure Peering initiated from PE appliance at DC site and branch with standalone SD-WAN SE and WANOP appliance

March 12, 2021

Contributed by:

S C

March 12, 2021

Contributed by:

S C

Auto Secure Peering initiated from PE appliance at DC site and branch with standalone SD-WAN SE and WANOP appliance

Configuration

Monitoring

Troubleshooting

In this article