DC GW router and SD-WAN

[Ahmed Ash]

Hi

i have question regarding SD-WAN design, for the HQ router showing below in the picture should it be working as normal routers to connect the sites or have to be vEdge VPN0/VPN512

consideration the HQ right now is only connecting to other sites and giving VOIP services no internet link attached.

 

[Adrian Jimenez]

Hey Ahmed,

As long as the vEdge can reach the controllers through the HQ router, it should be fine. Is there something specific you have in mind for that connection?

AJ

[Ahmed Ash]

Hi Adrian

thanks for your reply

my question more related to design and best practice for HQ routers from SD-WAN perspective

since all the controllers will be on-Prem, should it be as a normal router or to change to SD-WAN fabric (Pros/Cons)

[Adrian Jimenez]

Gotcha! The one thing that comes to mind looking at the diagram is that you won't be able to have more than one tunnel on that vEdge. For instance, you have an MPLS and Internet connection on the HQ and then you have your vEdge. If you would have your vEdge getting the 2 internet handoffs then you would be able to build 2 tunnels which will let you take advantage of SDWAN features such as app-aware routing and others. You might as well add a secondary link on the vEdge that goes to the same HQ and run 2 different tunnels through the HQ router but you're still running on a single point of failure.

Ideally you'd want to have your Edge device at the "edge" of your network.

Hope that helps!

AJ