Citrix SD-WAN

In-band and backup management

March 12, 2021

Contributed by:

S M C

In-band management

Citrix SD-WAN allows you to manage the SD-WAN appliance in two ways, out-of-band management and in-band management. Out-of-band management allows you to create a management IP using a port reserved for management, which carries management traffic only. In-band management allows you to use the SD-WAN data ports for management, which carry both data and management traffic, without having to configure an addition management path.

In-band management allows virtual IP addresses to connect to management services such as web UI and SSH. You can enable In-band management on multiple trusted interfaces that are enabled to be used for IP services. You can access the web UI and SSH using the management IP and in-band virtual IPs.

To enable in-band management on a virtual IP:

In the configuration editor navigate to Sites > Virtual IP Addresses.
Select Inband Mgmt for the virtual IPs for which you want to enable in-band management.

Note:

The interface should be of security type Trusted and Identity enabled.
Click Apply

For detailed procedure on configuring virtual IP address, see How to configure virtual IP.

Monitoring in-band management

In the preceding example, we have enabled in-band management on 172.170.10.78 virtual IP. You can use this IP to access the web UI and SSH.

In the web UI navigate to Monitoring > Firewall. You can see SSH and web UI accessed using the virtual IP on port 22 and 443 respectively in the Destination IP address column.

Localized image

Back up management network

You can configure a virtual IP address as a back-up management network. It is used as the management IP address if the management port is not configured with a default gateway.

Note:

If a site has internet service configured with a single routing domain, a trusted interface with identity enabled is selected as the backup management network by default.

To select a virtual IP as a back-up management network:

In the configuration editor navigate to Sites > Virtual IP Addresses.
Select a virtual IP address as a backup management network.
Click Apply.

For detailed procedure on configuring virtual IP address, see How to configure virtual IP address section in Configuration topic.

Monitoring backup management

In the preceding example, we have selected 172.170.10.78 virtual IP as the backup management network. If the management IP address is not configured with a default gateway, you can use this IP to access the web UI and SSH.

In the web UI navigate to Monitoring > Firewall. You can see this virtual IP address as the source IP address for SSH and web UI access.

Localized image

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

In-band and backup management

March 12, 2021

Contributed by:

S M C

March 12, 2021

Contributed by:

S M C

In-band and backup management

In-band management

Monitoring in-band management

Back up management network

Monitoring backup management

In this article