Manual Secure Peering initiated from PE appliance at DC site and Branch PE appliance

March 12, 2021

Contributed by:

S C

This deployment configures DC site PE appliance in LISTEN ON mode and Branch site PE appliance in CONNECT TO mode.

PE DC appliance is in LISTEN ON mode (on port 443).
Branch PE appliance is in CONNECT-TO mode.
LISTEN-ON IP for PE is in the interface IP associated to the routing domain for which “Redirect to WANOP” is enabled.
Manually upload CA and Cert Key pair certificates obtained from authentic source of certificate authority.

Configuration

To configure auto secure peering initiated from an PE appliance at DC site and PE appliance at branch site:

Upload CA Certificate and CA Key Certificate obtained from authentic certificate and provide to SD-WAN as shown below.
On a new PE appliance at the DC site, in the SD-WAN web GUI, go to Configuration > Secure Acceleration > Secure Peering.
Configure keystore by providing the keystore password or by disabling the keystore.
Enable secure peering by selecting CA Certificate radio button and providing uploaded CA and CA Key pair certificates appropriately as shown below.
Provide Remote machine’s Virtual IP along with Port 443 as shown below.

Monitoring

To validate if the Private CA and Private Certificate Key pair is generated successfully, review the information below.
On partner appliance, View Secure Partner Information on the Premium (Enterprise) Edition appliance under Monitoring > Partners > Secure Partners page.

Troubleshooting

View Secure Partner Success / Failure Information on the Premium (Enterprise) Edition Appliance under Monitoring > WAN Optimization > Partners > Secure Partners page. localized image

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Manual Secure Peering initiated from PE appliance at DC site and Branch PE appliance

March 12, 2021

Contributed by:

S C

March 12, 2021

Contributed by:

S C

Manual Secure Peering initiated from PE appliance at DC site and Branch PE appliance

Configuration

Monitoring

Troubleshooting

In this article