vBond

[RS19]

Just a basic question.

How does vBond knows about the v-Smart and vManage Public IP address details ?
vBond once authenticate the cEdges it provides with the v-Smart and v-Manage Public IP address details.
But how come vBond knows about the v-Smart and vManage Public IP addres details ? Are these configured when vBond is setup ?

[M02@rt37]

Hello @RS19 

On vManage you expllicitly confgure the public IP or FQDN vBond.

[RS19]

Thanks. How to check the current configuraiton. I checked via vManage the vBond running and local configuration, but I could not find out the vSmart and vManage details ?

Were are the settings done & how to check it ?

[M02@rt37]

In you vManage you have the vBond IP add no ? As initial configuration you should have configured IP address of vBond.

And also on vSmart, during intial configuration vBond address is asked.

[RS19]

I can see only private IP Address. I am not able to see any public IP Address. 
I have access to vManage. Let me know how to check it ?

[M02@rt37]

@RS19 

You’re only see private IP addresses in vManage and not the public IP, it likely means the controllers (like vSmart or vManage) are behind NAT but haven’t been configured with their public IPs using the nat-address command.

vBond relies on this NAT address to inform edge devices how to reach the controllers. Without it, vBond will only advertise the private IPs, which are not reachable over the internet or across networks.

Check on vManage VPN0 configuration, check if nat-address command is configured

[Dan Frey]

Devices only know to reach out to vbond using a dtls tunnel.  This is part of the configuration to reach out to vbond using a DNS name.   There are no endpoint configuration for vmanage or vsmart device.  When a device reaches out to vbond: 

1.  If the IP outter header of the dtls tunnel is the same as the inner header then vbond knows the device did not go through NAT and public/private addresses are the same.

2.  If they are different then there is a NAT gateway in the path and public/private addresses are different.

Can see vsmart and vmanage public/private addresses on vbond using "show orchestrator connections".

[RS19]

In my environment (which is Cisco is hosing my controllers), I am reaching vBond using FQDN using DNS. The vBond is resolving to 2 Public IP Addess cause I have 2 vBond in the environment.

Cisco is changing the Public IP address of vSmart. So in this scenario, how will cEdge will know about the new vSmart IP Address.
In normal scenario, cEdge gets the vSmart and vManage IP address details from vBond. Is my understanding right.

When there is change in IP address how cEdge will learn about the new vSmart IP ?

[Dan Frey]

Yes, cedge learns of reachability of the controllers through vbond.  This is true for additional controller components added to the system  or a change in the public IP of vsmart.  

[RS19]

Thanks.

But when there is change in Public IP Address of vSmart, it will get updated to vBond. How cEdge will come to know about the change.
The reason for asking this is because, cEdge will not contact vBond unless there is reboot or when the control connections are lost.
So would like to understand, how cEdge will come to know about the change in the Public IP of vSmart in normal condition.

[Dan Frey]

When vsmart ip address is changed the control connection is lost.   cedge will contact vbond because of this event.   

[RS19]

Thanks. Understood.
In my environment there are 2 vSmart.
So when IP of vSmart-1 IP is changed , cEdge will loose connectivity to vSmart-1. It will maintain the connectivity to vSmart-2.
Even in this scenario, will cEdge will contact vBond ?

[RS19]

1 more question. How will vBond comes to know that the vSmart-1 IP has changed ? How it learns and how it comes to know ?

[Dan Frey]

cEdge does not know the ip address changed; it only knows it lost a connection to one of the two vsmarts (because the address changed) so it contacts vbond.   cEdge will keep reaching out to vbond until a new vsmart connection is established. 

[Dan Frey]

Yes, Cedge will contact vbond in this scenario.