When you have multiple VPC networks, set up VPC network peering to establish connectivity between Google Cloud and the various VPC networks so that you can access the resources remotely. For details, refer to VPC Network Peering Overview.

The following figure depicts the branch-to-cloud connectivity using VPC peering across regions:

In the above diagram, “ncc-west2-pri” is the hub VPC that is associated to the Network Connectivity Center hub. The subnet 192.168.190.0/24 is associated to the “us-east1” region, where host1 is located. The “t1-australia” is the Spoke VPC where an Ubuntu virtual machine is installed. You must establish connectivity from host1, which is an on-prem appliance located on the West coast of the United States to the Ubuntu virtual machine located in Australia.

Complete the following tasks to establish branch-to-cloud connectivity using VPC network peering:

Procedure

  1. Create SD-WAN virtual Edge instances and cloud router in the “us-east1” region. Refer to steps 1-13 in Establish Branch-to-Branch Connectivity Using CLI.
  2. From the Google Cloud Console, set up VPC network peering. For instructions, refer to Using VPC Network Peering.
  3. Activate custom routes import/export on peered VPC. For instructions, refer to Using VPC Network Peering.
  4. Verify that your network is accepting custom routes from a peer network. For instructions, refer to the “Listing routes from peering connections” section in Using VPC Network Peering.
  5. Allow relevant inbound traffic in the VPC “t1-australia”. For instructions, refer to Using firewall rules.
  6. Configure custom IP range on the Cloud Router to match the subnet of the Spoke VPC. This enables the Cloud Router to advertise the Spoke VPC “t1-australia” subnet to the SD-WAN Virtual Edge over BGP. For instructions about how to configure custom IP range, refer to Advertising custom IP ranges.
  7. Log in to the SD-WAN Orchestrator and then verify connectivity to the route table on the SD-WAN virtual Edge instances. For instructions, refer to the “Route Table Dump” section in the VMware SD-WAN Administration Guide available at VMware SD-WAN Documentation.

What to do next

Run a ping test to verify the connection between the on-prem SD-WAN Edge instance, “host1” located on the West coast of the United States to the Ubuntu virtual machine located in Australia. For instructions, refer to the “Ping Test” section in the VMware SD-WAN Administration Guide available at VMware SD-WAN Documentation.