Configuring SD-WAN zones
To configure SD-WAN zones, you need to configure the primary and secondary Zscaler ZENs as SD-WAN interface members in an SD-WAN zone.
In this example, the SF ZEN is closer, so we will choose the Lowest Cost (SLA) SD-WAN algorithm to prefer the SF ZEN over the DC ZEN, and configure the Zscaler-SF interface with a lower cost.
We will configure two SD-WAN zones named Overlay and Underlay, and then configure SD-WAN interface members for those zones.
To configure the Overlay SD-WAN zone:
- Go to Network > SD-WAN Zones, and click Create New > SD-WAN Zone. The New SD-WAN Zone screen displays.
- Configure the Name field and leave the Interface members field blank.
- Click OK.
Similarly, repeat the above procedure to create another SD-WAN zone Underlay:
After you create the SD-WAN zones, you need to configure the primary and secondary ZENs as SD-WAN interface members in the Overlay SD-WAN zone, and the Internet_A and Internet_B interfaces in the Underlay SD-WAN zone.
To configure the primary ZEN as an SD-WAN interface member in the Overlay SD-WAN zone:
- Go to Network > SD-WAN Zones, and click Create New > SD-WAN Member. The New SD-WAN Member screen displays.
- Configure the Interface to be Zscaler-SF from the drop-down list.
- Configure the SD-WAN Zone to be Overlay from the drop-down list.
- Configure the Cost to be
5
. A lower Cost value indicates that this member is the primary interface member, and is preferred more than a member with a higher Cost value when using the Lowest Cost (SLA) strategy.
- Click OK.
To configure the secondary ZEN as an SD-WAN interface member in the Overlay SD-WAN zone:
- Go to Network > SD-WAN Zones, and click Create New > SD-WAN Member. The New SD-WAN Member screen displays.
- Configure the Interface to be Zscaler-DC from the drop-down list.
- Configure the SD-WAN Zone to be Overlay from the drop-down list.
- Configure the Cost to be
10
. A higher Cost value indicates that this member is the secondary interface member, and is preferred less than a member with a lower Cost value when using the Lowest Cost (SLA) strategy.
- Click OK.
Similarly, repeat the above procedure to configure the Internet_A and Internet_B interfaces in the Underlay SD-WAN zone.
After both the Overlay and Underlay SD-WAN zones are configured, with SD-WAN interface members configured as required in each of the SD-WAN zones, verify the configurations on the Network > SD-WAN Zones screen.
After configuring SD-WAN zones, we need to configure a static route that points to the SD-WAN interface.
To configure the static route:
- Go to Network > Static Routes, and click Create New > IPv4 Static Route. The New Static Route screen displays.
- Select Subnet for the Destination setting and enter
0.0.0.0/0.0.0.0
in the associated text input field. - Select SD-WAN as the Interface from the drop-down list.
- Click OK.