Cisco SD-WAN integration with Azure (IaaS use case)

[NetworkDOC]

Hello Expert,

I hope you're doing well. I am currently exploring the IaaS feature of Cisco SD-WAN and have reviewed the design documentation. However, I still have some questions regarding the prerequisites for the control complex.

Specifically, I’m unclear about whether we need to assign a public IP to our control complex, or if internet reachability alone is sufficient.

Do we need to provide a dedicated public IP for the vManage, vBond, and vSmart components?

Currently, our control complex is located within a local network and has access to the internet via PAT with a single public IP. Long story short we do have internet access from vManage.

I would appreciate any clarification or guidance on this.

[Kanan Huseynli]

Hi,

I'm sorry but what do you mean by "control complex"?

Regarding SD-WAN IaaS, it is normally for router deployment in cloud, but you have controllers.

Are controllers Cisco hosted or you just want to deploy them in AWS (which is supported from 20.6) like we do in on-prem infrastructure?

If you deploy in AWS, you need separate static public IP addresses. PAT via NAT GATEWAY will not work.

Remote controllers and routers have to reach other controller, this is inbound traffic (port forwarding) which is not supported by NAT Gateway, in any case.

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/controller-aws.html