shoppingwhe.blogg.se

Now we need to install the certificate by navigating to Configuration > Certificates > Controllers select vManage and then Install Certificate on top right hand corner, then selet the vManage.crt file from the directory and click install. Openssl x509 -req -in vSmart.csr -CA CA.crt -CAkey CA.key -CAcreateserial -out vSmart.crt -days 2000 -sha256

Openssl x509 -req -in vBond.csr -CA CA.crt -CAkey CA.key -CAcreateserial -out vBond.crt -days 2000 -sha256

Openssl x509 -req -in vManage.csr -CA CA.crt -CAkey CA.key -CAcreateserial -out vManage.crt -days 2000 -sha256 Repeat the above steps for vBond.csr and vSmart.csr. Next we need to generate the controller CSR's by navigating to Configuration > Certificates > Controllers select vManage click on the three dots and Generate CSRĭownload and save the file as vManage.csr in the directory where we have the Root CA. Generate and download CSR's for vManage, VSmart and Vbond Repeat the above step for adding the vBond. Now navigating to Configuration > Devices > Controllers > Add Controller from drop down select vSmart and provide the IP, username, password uncheck Generate CSR and click add. Next we set the controller Certificate Authorization to Enterprise Root Certificate and upload the CA.crt file Upon login first thing we should do is set the Organisation name and vBond IP by navigating to Administration > Settings. Now we connect to the vManage controller from the Linux VM from a browser on the vpn512 interface IP, or. Request root-cert-chain install /home/admin/CA.crt Initial bootstrap configuration of the controllers 2.1. Here the Linux host is being used as the CA server and also to gain GUI access to the vmanage for configuration purpose.

vBond is 2GB RAM, 1 vCPU, no required storage.vSmart is 4 GB RAM, 1 vCPU, no required storage.vManage is 12 GB RAM, 2 vCPUs, 30 GB storage.In this lab EVE-NG was setup in Google Cloud Platform(GCP) with 32 GB of RAM and 16 vCPU's allocated to it, for more on how to setup EVE-NNG in GCP refer the EVE-NG Community Cookbook documentation section 3.4 page 43 onwards( ). Here are the list of softwares used in this lab: We will be working with the below topology:ġ. Enable local internet breakdown and failover to DC default route.Replicate migration from Non-SDWAn sites to SDWAN site/routing between SDWAN and Non-SDWAN sites.Enable control policies to achieve hub-n-spoke type topology*.Replicate real world scenario's with small, medium large type of site or branch offices.Working with device and feature templates.Control plane setup vManage, vBond, and vSmart.In this lab, we will go through how to configure CISCO SD-WAN lab in EVE-NG.