Setting Data Center Preference

If there are multiple data centers in the network, you can set a preferred data center for the Branch Gateways for IPsec Internet Protocol security. IPsec is a protocol suite for secure IP communications that authenticates and encrypts each IP packet in a communication session. tunnel configuration and route preference.

To configure data center preference, complete the following steps:

  1. In the Aruba Central app, set the filter to a group that contains at least one Branch Gateway.

    The dashboard context for the group is displayed.

  2. Under Manage, click Devices > Gateways.

    A list of gateways is displayed in the List view.

  3. Click the Config icon.

    The gateway group configuration page is displayed.

  4. If you are in the Basic Mode, click Advanced Mode to access the advanced configuration options.
  5. Click VPN > SD-WAN Overlay.
  6. Select Orchestrated for the Overlay mode from the drop-down list and enable the Orchestrated mode.
  7. Click DC Preference.
  8. You can perform either of the following actions:
    1. To select individual hubs, select the Hubs radio button and then click the icon to select the hub group and VPNC(s). If the hub site has multiple VPNCs, you can configure a primary and secondary VPNC for the Branch Gateways.
      A maximum of 32 hubs can be added in the data center table.
    2. To select a clustered hub group, select Clustered hub group radio button and then click the icon to select a cluster of VPNCs. For more information about gateway cluster configuration, see Gateway Cluster Configuration Modes.
      A maximum of eight clustered hub groups can be added in the data center table. The maximum number of VPNCs comprising of all the added clustered hub groups is 32.
  9. Click Save Settings.

Data Center preference also determines the cost of the corresponding routes. A different cost based on the order of configuration is assigned to the advertised routes. This means that Data Center 1 with a primary preference automatically gets a lower cost assigned than the secondary VPNC. This cost is applied to the subnets Subnet is the logical division of an IP network. that are redistributed into overlay (and subsequently into Data Center) as well as the opposite direction (the Data Center subnets are being redistributed through the VPNC and are advertised to the branch).