Configure Non SD-WAN Destinations via Gateway

VMware allows the Enterprise users to define and configure a Non SD-WAN Destination instance to establish a secure IPsec tunnel to a Non SD-WAN Destination through an SD-WAN Gateway.

The Orchestrator selects the nearest Gateway for the Non SD-WAN Destination with its configured IP address, using geolocation service.

You can configure Non SD-WAN Destination via Gateway only at the Profile Level and cannot override at the SD-WAN Edge level.

Procedure

1. In the SD-WAN service of the Enterprise portal, go to Configure > Network Services, and then under Non SD-WAN Destinations, expand Non SD-WAN Destinations via Gateway.

   

2. Click New or New NSD via Gateway option to create a new Non SD-WAN Destination.
   Note: The New NSD via Gateway option appears only when there are no items in the table.

   

   Option	Description
   Name	Enter a name for the Non SD-WAN Destination in the text box.
   Type	Select an IPsec tunnel type. The available options are: AWS VPN Gateway Note: This service is introduced in the 4.3.0 release. Customers can also use different primary Public IPs and Secondary Public IPs for NVS Gateways for AWS. Check Point Cisco ASA Note: Secondary VPN Gateway is not supported for this option. Cisco ISR Generic IKEv2 Router (Route Based VPN) Microsoft Azure Virtual Hub Note: Requires a valid subscription. Palo Alto SonicWall Configure a Non SD-WAN Destination of Type Zscaler Generic IKEv1 Router (Route Based VPN) Generic Firewall (Policy Based VPN) Note: Secondary VPN Gateway is not supported for this option.
   Primary VPN Gateway	Enter a valid IP address.
   Secondary VPN Gateway	Enter a valid IP address. This field is optional.

3. Click the Create button.
   You are redirected to an additional configuration options page based on the selected IPsec tunnel type. Click each of the links in the table above for more information on these tunnel types.
4. Following are the various options available under the Non SD-WAN Destinations via Gateway section:

   Option	Description
   Delete	Select an item and click this option to delete it.
   Operator Alerts	Select an item and set the Operator Alert to On or Off.
   Update Alerts	Select an item and update the previously set Operator Alert.
   Columns	Click and select the columns to be displayed or hidden on the page.

   Note:

   • You can also access these options by clicking the vertical ellipsis next to the item name in the table.
   • The Edit option takes you to the additional configuration settings screen.
   • Click the information icon at the top of the table to view the Conceptual Destination Diagram, and then hover across the diagram for more details.

What to do next

• Associate your Non SD-WAN Destination to a Profile. For more information, see:
  • Configure a Tunnel Between a Branch and a Non SD-WAN Destinations via Gateway
  • Configure Tunnel Between Branch and Non SD-WAN Destinations via Edge
• Configure a Business Policy. For more information, see Configure Business Policies.
  Note: Configuring Business Policy is not mandatory for this feature.