Question
How to enable IP forwarding on a controller that is connected to Versa Director?
Solution
Enabling IP forwarding for the Virtual Machine (VM) is necessary to allow a VM to receive traffic addressed to other destinations.
NOTE: This is an Azure setting, and not a setting in the guest operating system. This configuration is in addition to the the security group configuration that is available on NIC level (on Microsoft Azure). This configuration is not a replacement for placing approriate security group for the SD-WAN deployment solution.
Enabling IP Forwarding on Controller Interface Connected to Versa Director
Follow these steps to enable IP forwarding:
- Login to Azure portal.
- Select Network Interfaces.
- Select a Name and click IP configurations.
- Select Enabled option for IP forwarding.
This enables the IP forwarding on the Controller interface connected to Versa Director.
Adding User Defined Routes
Enable User Defined Routes (UDR) in Azure along with IP forwarding. With UDRs, the controller address is used as a gateway for IPSec overlay network address for the netconf traffic originating from the Versa Director.
Follow these steps to add UDR:
- Login to Azure portal.
- Select Route tables > Create route tables.
- In the Create route table section, enter appropriate values for Name, Subscription, Resource group, and Location. A Route table, Test, is created.
- Select Route tables > Test > Routes > Add.
- In the Add route pane, enter values for Route name, Address prefix, Next hop type, and Next hop address.
- Click OK.
Associating the Route Table with Subnets
NOTE: You cannot motre than one routing table with a subnet.
Follow these steps to associate the route table with the subnets:
- Open the newly created route table, and click Subnets.
- In the Subnets column, click Associate to add a subnet.
- In the Associate subnet column, click Virtual network.
- Select the virtual network in the Resource column.
- In the Associate subnet column, click Subnet.
- In the Choose subnet column, select the subnet.
- Click OK.
- Optionally, associate additional subnets with the route table.
NOTE: You cannot associate more than one routing table with a subnet.
- The subnets associated with this route table are now visible in the subnets section of your route table’s column.