Biz-internet vs Public-internet

[Steytler]

I'm wondering what the difference is in the color designation for biz-internet vs public-internet.  Some kind of private security proxy for biz?

[balaji.bandi]

Just Colors to define what transport you using for TLOC Color

• Private Colors -  (mpls, private1, private 2, private 3, private 4, private 5, private 6 and metro-ethernet)
• Public Colors - (red, blue, public-internet, Biz-internet)

https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-design-guide.html

Maybe as per understanding, if you have 2 Provider Like COLT and BT, you can use any of the colors to differentiate which path to use.

[Kanan Huseynli]

Hi,

colors are labels for interface, but it has more meaning than just "description". The requirement is that each tunnel interface in VPN0 must have color defined.

Based on local and remote router colors, local router understand which destination address should it use to create IPSEC between itself and remote router: public-public, public-private, private-public requires public IP address in destination, private-private requires private IP address in destination, here public means post-NAT, private means pre-NAT addresses.

Based on local and remote router colors, local router may not initiate IPSEC address, if restrict keyword under tunnel is defines and local/remote colors are different.

In reality, there is no special difference between public-internet and biz-internet.

HTH,

[svemulap@cisco.com]

Hi Steytler -

There isn't any security proxy, if any for biz-color. Both biz and public are part of the public colors.
As part of the SD-WAN solution, you also, have private-colors.

The design guide at: https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-design-guide.html#CommunicationBetweenPrivateandPublicColors covers this section.

Hope it helps.