Question: How to reach Active Directory server in branch LAN and Versa Director to fetch user information?


Answer:

To reach Active Directory server in branch LAN and Versa Director to fetch user information, perform the following procedures separately on CPE and Controller.


CPE:

  1. Create a paired tvi between LAN and Control-VR
  2. Add static route in LAN-VR
    • For the VD IP under LAN-VR towards Control tvi as next-hop
  3. Add static route in Control-VR
    • For the server [ex: AD server] IP under Control-VR towards LAN tvi as next-hop
  4. Under controller BGP – add IPV4 unicast address family and redistribute static

Controller:

  1. In controller, under the specific tenant-control VR, add term with protocol ‘BGP’ under To-ProviderOrg redistribution policy.
  2. In controller, under provider control-VR, add term with protocol BGP under Default-Policy redistribution policy.
  3. The AD server subnet wis now available under provider-VR.
  4. Redistribute the routes depending on the route protocol configured between NB of Controller and upstream Router.