Enabling Branch Gateways to Automatically Connect to VPNCs

To enable Branch Gateways to automatically connect to VPNCs, complete the following steps:

1. To enable a Branch Gateway group or Branch Gateway to automatically connect to VPNC, complete either one of these steps:

• To select a gateway group:

  1. In the HPE Aruba Networking Central app, set the filter to a group that contains at least one Branch Gateway.

     The dashboard context for a group is displayed.
     

  2. Under Manage, click Devices > Gateways.

     A list of gateways is displayed in the List view.

  3. Click Config.

     The configuration page is displayed for the selected group.

• To select a gateway:

  1. In the HPE Aruba Networking Central app, set the filter to Global or a group that contains at least one Branch Gateway.

  2. Under Manage, click Devices > Gateways.

     A list of gateways is displayed in the List view.
     

  3. Click a gateway under Device Name.

     The dashboard context for the gateway is displayed.

  4. Under Manage, click Device.

     The gateway device configuration page is displayed.

2. If you are in the Basic Mode, click Advanced Mode to access the advanced configuration options.

3. Click VPN > SD-WAN Overlay.

4. Select the Overlay mode as Manual.

5. Under Spoke Settings, turn on the Connect automatically to VPNC toggle switch.

6. Enter a passphrase for VPN Virtual Private Network. VPN enables secure access to a corporate network when located remotely. It enables a computer to send and receive data across shared or public networks as if it were directly connected to the private network, while benefiting from the functionality, security, and management policies of the private network. This is done by establishing a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two. peer authentication. Ensure that the same passphrase is configured on the Branch Gateways.

7. If required, advertise branch VLANs Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. to all hubs. For more information, see Advertising Branch Subnets to Hub Sites.

8. Click + from the Hubs table and add the following information:

• Primary VPNC—Enter the MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address of the primary VPNC.

• Backup VPNC—If you have a backup VPNC deployed at your site, enter the MAC address of the backup VPNC.

• IP Address—Enter the IP address of the VPNC.

• Source VLAN—If you have more than one VPNC, enter the VLAN of WAN Wide Area Network. WAN is a telecommunications network or computer network that extends over a large geographical distance. uplink VLAN interface of the Branch Gateway on which the VPN tunnel must initiate.

• Select any of the following encryption methods from the Encryption drop-down list:

  • Factory Cert—To use the built-in TPM Trusted Platform Module. TPM is an international standard for a secure cryptoprocessor, which is a dedicated microcontroller designed to secure hardware by integrating cryptographic keys into devices. certificate for mutual authentication.

  • Custom Cert—To use custom certificates for mutual authentication. If you want to use custom certificates, ensure that the CA Certificate Authority or Certification Authority. Entity in a public key infrastructure system that issues certificates to clients. A certificate signing request received by the CA is converted into a certificate when the CA adds a signature generated with a private key. See digital certificate. and Server certificates are uploaded to the certificate inventory on HPE Aruba Networking Central. For more information, see Certificates.

• If required, advertise branch VLANs to this hub. For more information, see Advertising Branch Subnets to Hub Sites.

9. Click Save Settings.

This animation will help you to enable Branch Gateways to automatically connect to VPNCs, complete the following steps.