Private sd wan

[taytibob]

Hello

is it possible to deploy sd wan on a private network without having any internet access ?

this means vbond will not have access to internet 

thank you

[ekhabaro]

Yes that's for sure possible. Do you have any specific issues?

[taytibob]

I understood that the vbond need to have a connection to internet to push the initial configuration on the routers 

is there another way without connecting to the internet ?

basically my SD-WAN infrastructure needs to be fully private from day zero ( for security reasons)

[hcheviry]

In this case, you can deploy your controllers on-premise. As long as edge routers can reach vBond through your private network you should be good. Internet connection is mandatory only when sdwan controllers are deployed in public cloud. 

[HashamM · Accepted solution]

All controllers can be deployed On-Prem and you don't have to have Internet. Without internet you will just not have Zero touch deployment as SD-WAN Edge devices won't be able to reach out to PNP/ZTP servers. You would need to either manually configure minimal configurations (vbond address, etc) or provide that information in bootstrap configs.