ADVPN 2.0

This topic includes reference configurations for the following components:

• Spoke

• Hub

Spoke

1. Enable ADVPN 2.0 on the overlay SD-WAN Zone, assigning the Performance SLA used to probe the overlay SD-WAN Members:

   config system sdwan
       config zone
           edit "overlay"
               set advpn-select enable
               set advpn-health-check "HUB"
           next
       end
   end

2. For the topologies with segregated transports, configure different Transport Groups for theoverlay SD-WAN Members:

   config system sdwan
     config members
       edit 2
         set interface "H1_INET"
         set zone "overlay"
         set transport-group 1
       next
       edit 3
         set interface "H1_MPLS"
         set zone "overlay"
         set transport-group 2
       next
       edit 4
         set interface "H2_INET"
         set zone "overlay"
         set transport-group 1
       next
       edit 5
         set interface "H2_MPLS"
         set zone "overlay"
         set transport-group 2
       next
     end
   end

3. In some use cases (such as “Backup of Last Resort”), it is also required to configure the link costs:

   • Must configure the cost both on the overlay SD-WAN Member and on the corresponding phase1-interface

   config vpn ipsec phase1-interface
     edit "H1_LTE"
       set link-cost 10
     next
     edit "H2_LTE"
       set link-cost 10
     next
   end
   

   config system sdwan
     config members
       edit 3
         set interface "H1_LTE"
         set cost 10
       next
       edit 5
         set interface "H2_LTE"
         set cost 10
       next
     end
   end
   

Hub

No additional configuration required.