CG522-E system-ip with vManage template

[brian.holmes]

What IP address should be set as the system-ip address in the vManage template?

1.  The IP provided by the wireless sim provider?
2. The IP to assign to the ENET interface of the CG522-E?  ( for local management )
3. The IP to be used on a SD-WAN VPN ( for in-band management )?  how can you assign the VPN as well?

Thanks in advance

[Kanan Huseynli · Accepted solution]

Hi,

system IP is like router ID from traditional routing protocols. You can set whatever you want. This is just unique number per SD-WAN node, but just in IP format (a.b.c.d).

Normally, when you design your overlay network (i.e SD-WAN), you select IP-based numbering for each region/site/router.

For example, controllers use 1.x.y.z format where x is regions y is controller type , z is controller number

For routers, you use 1.a.b.c format where a is region, b is site, c is site router number.

[brian.holmes]

So basically the CG builds a TLS tunnel with vManage over the Internet and the system-ip is like the loopback IP of the CG and just needs to be unique within the controller complex.

Thank you very much,
Brian

[Kanan Huseynli]

System-IP is not used for connectivity, that's why it can be arbitrary (but just unique). It is just used as parameter during negotiations.

Tunnel-enabled Transport (VPN0) interfaces are used for connectivity to controllers and other routers from local device.

[Kanan Huseynli]

You can also get some generic key points from CVD, Service-Side/DC/Branches sections:

https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-design-guide.html#ServiceSide