Citrix SD-WAN

Inline mode

March 12, 2021

Contributed by:

S C

This article provides the detail on configuring a branch with Inline Deployment mode. In this mode, the SD-WAN appliance appears to be an Ethernet bridge. Most of the SD-WAN appliance models include a fail-to-wire (Ethernet bypass) feature for inline mode. If power fails, a relay closes and the input and output ports become electrically connected, allowing the Ethernet signal to pass through from one port to another. In the fail-to-wire mode, the SD-WAN appliance looks like a cross-over cable connecting the two ports.

In the following diagram interfaces 1/1 and 1/2 are hardware bypass pairs and will fail-to-wire connecting the Core to the edge MPLS Router. Interfaces 1/3 and 1/4 are also hardware bypass pairs and will fail-to-wire connecting the Core to the edge Firewall.

Inline mode

Branch site inline deployment configuration

Following are the high-level configuration steps to configure Branch site for Inline deployment:

Create a Branch site.
Populate Interface Groups based on connected Ethernet interfaces.
Create Virtual IP address for each virtual interface.
Populate WAN links based on physical rate and not burst speeds using Internet and MPLS Links.
Populate Routes if there are more subnets in the LAN infrastructure.

To create a Branch site

Navigate to Configuration Editor > Sites, and click + Add button.
Keep default settings unless instructed to change.

To populate interface groups based on connected Ethernet interfaces

In the Configuration Editor, navigate to Sites > View Site > [Client Site Name] > Interface Groups. Click + to add interfaces intended to be used. For Inline Mode, each Interface Group is assigned two Ethernet interfaces.
Bypass mode is set to fail-to-wire and Bridge Pair is created using the two Ethernet interfaces.
Refer to the sample topology above and populate the Interface Groups fields as shown below.

To create Virtual IP (VIP) address for each virtual interface

Create a Virtual IP address on the appropriate subnet for each WAN Link. VIPs are used for communication between two SD-WAN appliances in the Virtual WAN environment.

To populate WAN links based on physical rate and not on burst speeds using Internet link

Navigate to WAN Links, click + button to add a WAN Link for the Internet link.
Populate Internet link details, including the Auto Detect Public IP address as shown below.
Navigate to Access Interfaces, click + button to add interface details specific for the Internet link.
Populate Access Interface for IP address and gateway as shown below.

To create MPLS link

Navigate to WAN Links, click + button to add a WAN Link for the MPLS link.
Populate MPLS link details as shown below.
Navigate to Access Interfaces, click + button to add interface details specific for the MPLS link.
Populate Access Interface for IP address and gateway as shown below.

To populate routes

Routes are auto-created based on above configuration. In case there are more subnets specific to this remote branch office, then specific routes need to be added identifying which gateway to direct traffic to reach those back end subnets.

Inline mode populates route

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Inline mode

March 12, 2021

Contributed by:

S C

March 12, 2021

Contributed by:

S C

Branch site inline deployment configuration
To create a Branch site
To populate interface groups based on connected Ethernet interfaces
To create Virtual IP (VIP) address for each virtual interface
To populate WAN links based on physical rate and not on burst speeds using Internet link
To create MPLS link
To populate routes

Inline mode

Branch site inline deployment configuration

To create a Branch site

To populate interface groups based on connected Ethernet interfaces

To create Virtual IP (VIP) address for each virtual interface

To populate WAN links based on physical rate and not on burst speeds using Internet link

To create MPLS link

To populate routes

In this article