Configuring WAN Interface for an AOS-10 VPNC

This section defines uplink interfaces by creating WAN Wide Area Network. WAN is a telecommunications network or computer network that extends over a large geographical distance.-facing VLANs Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN., labeling them as uplink interfaces, and assigning them to the desired uplink ports.

To configure a WAN interface, complete the following steps:

1. In the WebUI, set the filter to Global or a group that contains at least one Branch Gateway that is configured as an AOS-10VPNC.
2. Under Manage, click Devices > Gateways.
   A list of gateways is displayed in the List view.
3. Click a gateway under Device Name.
   The dashboard context for the gateway device is displayed.
4. Under Manage, click Device.
   The gateway configuration page is displayed.
   If you are accessing the VPNC configuration page for the first time, the Guided Setup wizard opens automatically. Otherwise, click the Guided Setup.
   
5. In the WAN tab, enable the Enable health checks toggle switch.
   
   

   The WAN health check enables sending probes to measure availability and SLA of the uplinks. When the health check feature is enabled, the probes are sent through the underlay at regular intervals to verify if the Internet is reachable over the uplink interfaces configured on VPNCs.

6. Configure the following health check parameters:
   
   1. Health check destination—You can configure a User defined IP address or use the default HPE Aruba Networking cloud  instance to send WAN health check probes.
      • Health check IP address/FQDN—If you select User defined destination, enter the IPv4 address or FQDN Fully Qualified Domain Name. FQDN is a complete domain name that identifies a computer or host on the Internet. of a host that is reachable through the WAN paths outside the VPN Virtual Private Network. VPN enables secure access to a corporate network when located remotely. It enables a computer to send and receive data across shared or public networks as if it were directly connected to the private network, while benefiting from the functionality, security, and management policies of the private network. This is done by establishing a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two. tunnel.
   2. Health check probe mode—Select one of the following probe modes:
      • Ping—Sends ICMP Internet Control Message Protocol. ICMP is an error reporting protocol. It is used by network devices such as routers, to send error messages and operational information to the source IP address when network problems prevent delivery of IP packets. probes to measure latency and packet loss
      • UDP—Sends UDP User Datagram Protocol. UDP is a part of the TCP/IP family of protocols used for data transfer. UDP is typically used for streaming media. UDP is a stateless protocol, which means it does not acknowledge that the packets being sent have been received. Probes through UDP port 4500 to measure latency, packet loss, and jitter
7. Click Next.
   The WAN Details page is displayed.
   
8. To add a WAN port, click the + icon in the Uplinks table.

   The New Uplink page is displayed.

9. Enter a name for the WAN port in the Uplink field.
10. Select the Interface VLAN ID from the drop-down list.
11. Select one of the type of WAN uplink from the WAN type drop-down list.

    The selection of Internet or MPLS determines the type of IP address used:

    • Internet—If you select this option, enter an IP address in the Public IP field.
    • MPLS—If you select this option, enter an IP address in the Private IP field.
12. Click Save and then Click Next.
13. Review the summary page and click Finish.

    A disabled Finish button indicates that there are errors remaining. To proceed to the next step, you must resolve the errors.

14. Click Continue to configure SD-Branch routing profiles.

The following GIF illustrates the workflow: