SD-WAN Service-Chaining & vEdge configuration

[AminRamadan]

Certainly:

"What kind of configuration should the hub have to communicate with the FW in SD-WAN Service Chaining?
I read somewhere that the network service must be layer 2 adjacent to the WAN edge device. What does that mean?

[balaji.bandi]

What kind of configuration should the hub have to communicate with the FW in SD-WAN Service Chaining?

check below guide for what Port required to open -

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/cisco-sd-wan-overlay-network-bringup.html

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/cisco-sd-wan-overlay-network-bringup.html#c_Firewall_Ports_for_Viptela_Deployments_8690.xml

I read somewhere that the network service must be layer 2 adjacent to the WAN edge device. What does that mean?

we are not sure what context of this statement , can you provide the relavant document what they referring. (if i am correct that may be Controller services i guess - check above guides may help you).

[AminRamadan]

thank you for answering

[Kanan Huseynli · Accepted solution]

Hi,

at subnet level, it should be somehow directly connected either within the same physical interface/subinterface (can be using L2 switch or even L2 strech vlan) OR using tunnelling.

But firewall IP will be directly connected at the subnet level.

Here there is good comment from Danil Dib:

https://community.cisco.com/t5/sd-wan-and-cloud-networking/ask-the-expert-sd-wan-fundamentals-and-implementation/td-p/3910571

Also, this link has good information:

https://learningnetwork.cisco.com/s/article/cisco-sd-wan-service-chaining

[AminRamadan]

thank you