I have recently come across a question that I cannot seem to find a definite answer for.
The question is in regard to what would be possible to do with SDWAN and VDOMs with Inter VDOM links.
Traditionally, you can use a FG and assign WAN 1 to one VDOM and WAN 2 to another. With that solution you can split a FG to be used by several companies without interfering with routing, security or ipsec tunnels e.t.c.
However, if we raise the complexity abit I find it hard to find straight answers.
I will setup a new site with dual ISP:s. They will be delivered using 1x Fiber with a link-net each.
They will go into a stacked Edge Switch that will provide 4x Fiber outputs. 2 for each ISP connection.
This in turn will go into a FG cluster running in A/P using SD WAN to load balance and provide failover in case one link goes down. So far, not a problem.
My question is in regards to a request to share 1G of this connection to a 3:d company (Company B) in the same physical location. My initial thought was to provide them with a VDOM as that has been the "classic" approach.
However, I am not sure how this will be handled with SDWAN as well as the possibility to create VPN for example on the back of this.
So, now the question:
Will it work to have a VDOM for Company B to administer with an Inter VDOM link from Company A VDOM where the SDWAN originates? Will it work in such a way that Company B can use all the functionality as if they had 1 physical wan interface in regards to VPN, ipsec tunnels, NAT etc.?
I have attached a quick drawing of the thought up setup.
I hope you understand my question as well as the problem.