Fortinet white logo
Fortinet white logo

SD-WAN Deployment for MSSPs

Hub details

Hub details

Another area of improvement is in the Hubs section of the Project Template, for example:

'site1-H1': {
  'lo_bgp': '10.200.1.253',
  'overlays': {
    'ISP1': {
      'wan_ip': '100.64.1.1',
      'network_id': '11'
    },
    'ISP2': {
      'wan_ip': '100.64.1.9',
      'network_id': '12'
    },
    'MPLS': {
      'wan_ip': '172.16.1.5',
      'network_id': '13'
    }
  }
}

These are the underlay IP addresses to which the Spokes will establish the IPsec tunnels when building the overlay network. This data will differ per project. We can generalize it by using variables:

'site1-H1': {
  'lo_bgp': '10.200.1.253',
  'overlays': {
    'ISP1': {
      'wan_ip': h1_isp1_wan_ip,
      'network_id': '11'
    },
    'ISP2': {
      'wan_ip': h1_isp2_wan_ip,
      'network_id': '12'
    },
    'MPLS': {
      'wan_ip': h1_mpls_wan_ip,
      'network_id': '13'
    }
  }
}

Note, however, that these values are identical for the entire region because all the Spokes in the region will connect to the same Hubs. Especially in single-region projects, we recommend setting the default value for each of these variables, instead of setting identical values for every Spoke:

Hub details

Hub details

Another area of improvement is in the Hubs section of the Project Template, for example:

'site1-H1': {
  'lo_bgp': '10.200.1.253',
  'overlays': {
    'ISP1': {
      'wan_ip': '100.64.1.1',
      'network_id': '11'
    },
    'ISP2': {
      'wan_ip': '100.64.1.9',
      'network_id': '12'
    },
    'MPLS': {
      'wan_ip': '172.16.1.5',
      'network_id': '13'
    }
  }
}

These are the underlay IP addresses to which the Spokes will establish the IPsec tunnels when building the overlay network. This data will differ per project. We can generalize it by using variables:

'site1-H1': {
  'lo_bgp': '10.200.1.253',
  'overlays': {
    'ISP1': {
      'wan_ip': h1_isp1_wan_ip,
      'network_id': '11'
    },
    'ISP2': {
      'wan_ip': h1_isp2_wan_ip,
      'network_id': '12'
    },
    'MPLS': {
      'wan_ip': h1_mpls_wan_ip,
      'network_id': '13'
    }
  }
}

Note, however, that these values are identical for the entire region because all the Spokes in the region will connect to the same Hubs. Especially in single-region projects, we recommend setting the default value for each of these variables, instead of setting identical values for every Spoke: