Configure SD-WAN Orchestrator for Azure Virtual WAN IPsec Automation from SD-WAN Edge

You can configure SD-WAN Orchestrator for integrating Azure Virtual WAN and SD-WAN Edge to enable the branch-to-Azure VPN connectivity directly from SD-WAN Edge.

Note: For Release 4.3.0, when using the Azure Virtual WAN Automation from SD-WAN Edge feature, the Non SD-WAN Destination (NSD) tunnel only supports static routes. As a result, this feature is not currently compatible with BGP over IPsec.

Before you begin the SD-WAN Orchestrator configuration for Azure Virtual WAN - SD-WAN Edge automation, ensure you have completed all the steps explained in the Prerequisite Azure Configuration and Configure Azure Virtual WAN for Branch-to-Azure VPN Connectivity sections.

For step-by-step instructions about the various procedures that need to be completed in the SD-WAN Orchestrator side for integrating Azure Virtual WAN and SD-WAN Edge, see:

• Configure a Cloud Subscription Network Service
• Configure a Microsoft Azure Non SD-WAN Destination via Edge
• Enable Cloud VPN at the Profile Level
• Associate a Microsoft Azure Non SD-WAN Destination to a SD-WAN Edge and Add Tunnels