The following snippet summarizes the SD-WAN Multi-Datacenter (Primary/Secondary) architecture and deployment guide for Enterprises. To view the complete guide, go to Multi-Datacenter (Primary/Secondary) Enterprise SD-WAN.
Multiple datacenters (primary/secondary gateways)
Deployments requiring geo-redundant datacenters (or private workload) connectivity will extend our base design to include a second SD-WAN gateway. In this design, branch SD-WAN devices now have two (or more) gateways at separate geo-redundant locations from which to steer traffic. A primary gateway is usually located in the preferred datacenter location while the secondary gateway is at the redundant location. Traffic will flow through the primary gateway under normal conditions and utilize the secondary gateway as a backup. While this section will refer to a traditional datacenter, the gateway can be located in a public or private cloud, customer premise location, or any other location where FortiGate physical or virtual appliance can be configured.
Deployment procedures
Following is a summary of the steps required to configure SD-WAN using FortiManager:
- Configure the overlay using the SD-WAN overlay template. See Creating an overlay template.
- Assign metadata values to branch devices. See Assigning meta data values to branch devices.
- Configure SD-WAN rules. See Configuring SD-WAN rules.
- Create normalized interfaces. See Creating normalized interfaces.
- Create policy packages and firewall policies for hub and branch devices. See Creating policy packages and firewall policies.
- Install policy packages to devices. See Installing policy packages.
- Verify the SD-WAN configuration. See Verifying the SD-WAN configuration.
For more information, go to Multi-Datacenter (Primary/Secondary) Enterprise SD-WAN.
For sample configurations, go to the 4D-Demo/4D-SDWAN/Dual Hub github repository.
