Bastion Orchestrator Overview Prerequisites for Bastion Orchestrator ConfigurationDescribes the Prerequisites for Bastion Orchestrator Configuration. Configure Bastion OrchestratorOnly an Operator Super user can perform Bastion Orchestrator configuration. The Bastion Orchestrator configuration involves configuring two SD-WAN Orchestrators as a Bastion pair. Set up Production OrchestratorDescribes the pre-configuration steps to be completed in the Production Orchestrator to activate a SD-WAN Edge against a Bastion Orchestrator and then promote it to the Production Orchestrator. Stage a SD-WAN Edge to Bastion OrchestratorBefore you stage a SD-WAN Edge to Bastion Orchestrator, you must first stage an Enterprise associated with the Edge to the Bastion Orchestrator. Stage a SD-WAN Gateway to Bastion OrchestratorOptionally, an Operator user can stage a SD-WAN Gateway to Bastion Orchestrator. Activate the SD-WAN Edge Against the Bastion OrchestratorOnce a SD-WAN Edge is staged to Bastion Orchestrator, an Operator user can activate the Edge against the Bastion Orchestrator. The process of activating the Edge begins with the initiation of an Edge activation procedure e-mail that is sent to the Site Contact by the IT Admin. Promote an Activated Edge from Bastion Orchestrator to Production OrchestratorOnce a SD-WAN Edge is activated successfully and it is ready for routing network traffic, you can promote the activated Edge from the Bastion Orchestrator to the Production Orchestrator through a secure channel. Monitor Bastion Orchestrator Configuration and EventsSD-WAN Orchestrator allows an Enterprise user to monitor the status of SD-WAN Edges and their Bastion states from the Monitor > Network Overview page. RMA Reactivation for Bastion Orchestrator TopologyIn a Bastion Orchestrator topology setup, VMware SD-WAN allows RMA reactivation only for activated and promoted SD-WAN Edges to the Production Orchestrator.