Citrix SD-WAN

Auto Secure Peering to a PE appliance from a Standalone SD-WAN SE and WANOP Appliance on the DC site

March 12, 2021

Contributed by:

S C

To perform auto secure peering on a PE appliance from a standalone SD-WAN SE and WANOP appliance on the DC Side:

WANOP DC appliance is in LISTEN ON mode (2312/Any non-standard port).
Branch PE appliance is in CONNECT-TO mode.
WANOP DC initiates automatic secure peering to a PE appliance which installs the Private CA Certs and CERT KEY Pairs and configure CONNECT-TO on the PE appliance with WANOPs LISTEN-ON IP.

On a standalone WANOP appliance at the data center, click Secure in the Secure Peering pane of the Secure Acceleration page.
Configure the keystore settings by providing the keystore password or by disabling the keystore.
Enable Secure Peering by selecting Private CA to perform AUTOMATIC SECURE PEERING.
The appliance level CA certificate and private Certificate and Key is generated on the local WANOP and a table to add a REMOTE PEER TO Perform AUTO secure peering with is displayed.
Click on the ‘+’ icon and a popup window to add IP address with username and password is displayed. After successful authentication with the remote IP with credentials provided, a request is sent to the remote machine that installs CA Certificate and the Private certificate and key for itself locally (on the remote machine).

Note

IP Address – IP Address of remote PREMIUM (ENTERPRISE) EDITION APPLIANCE MANAGEMENT IP

Username – Username of remote PREMIUM (ENTERPRISE) EDITION APPLIANCE

Password – Password of remote PREMIUM (ENTERPRISE) EDITION APPLIANCE

After Successful Authentication, you will see Secure Peering as TRUE and the partner IP address as one of the Virtual IP addresses of the remote Premium (Enterprise) Edition Appliance. localized image

Monitoring

View Secure Partner Information on the Premium (Enterprise) Edition appliance under WANOPTIMIZATION > Partners in the Monitoring page.

Data Store Encryption can be performed on the Premium (Enterprise) Edition appliance through feature enablement from the MCN under Optimization node for a Premium (Enterprise) Edition appliance.
For a Premium (Enterprise) Edition appliance, secure peering is always enabled.
To validate if the Private CA and Private Certificate Key pair is generated successfully, review the information below:
View Secure Partner Information on the Premium (Enterprise) Edition appliance under Monitoring > WAN Optimization > Partners page.
On partner appliance, View Secure Partner Information of the Premium (Enterprise) Edition appliance under Monitoring > Partners & Plug-ins > Secure Partners page.

Troubleshooting

View Secure Partner Success / Failure Information on the Premium (Enterprise) Edition appliance under Monitoring > WAN Optimization > Partners > Secure Partners page.
On partner appliance, view Secure Partner Information on the Premium (Enterprise) Edition appliance under Monitoring > Partners & Plug-ins > Secure Partners page.
On partner appliance, view Secure Partner Information on the Premium (Enterprise) Edition appliance under Monitoring > Appliance Performance > Logging page.

localized image

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Auto Secure Peering to a PE appliance from a Standalone SD-WAN SE and WANOP Appliance on the DC site

March 12, 2021

Contributed by:

S C

March 12, 2021

Contributed by:

S C

Auto Secure Peering to a PE appliance from a Standalone SD-WAN SE and WANOP Appliance on the DC site

Monitoring

Troubleshooting

In this article