Skip to main content
3x-t
3x-t
Explorer
December 10, 2021
Question

VLANs over ADVPN

  • December 10, 2021
  • 1 reply
  • 1715 views

Hello,

I have set up ADVPN for two BO's and now I need to add additional VLAN to BO. What would be a procedure to do that?
1. Create VLAN on lan interface at BO
2. Add Address for that VLAN on BO FG
3. 4. ...?

Do I need to create the same VLAN on the HQ lan interface?

 

Thanks

1 reply

akileshc
Staff
akileshc
Staff
January 5, 2022

Hello,

 

If you want to add a new VLAN/subnet to one of your Branch Firewalls (ADVPN setup) and connect to other branches, the process is quite similar to adding a new subnet in a conventional site-to-site VPN setup.

 

Branch & HUB Firewall modification required:
1. Set up a VLAN interface and assign an IP address with the specified subnet mark.
2. Include this subnet in the Phase 2 selectors of the VPN tunnel that is being established between the relevant Branch and HUB firewall.
3. Include this subnet in the appropriate IPv4 policy.
4. Steps 2 and 3 must also be completed on the HUB firewall.
5. Add this subnet to the BGP advertising network list in Branch Firewall.

 

I hope this helps you finish the configuration to your specifications.

Terms & ConditionsAccessibility statement