Deploy Citrix SD-WAN on Azure from Citrix SD-WAN Center
Citrix SD-WAN for Azure enables organizations to have a direct secure connection from each branch to the applications hosted in Azure eliminating the need to backhaul cloud bound traffic through a data center.
Prerequisites
- Citrix Workspace Cloud credentials.
- Azure subscription credentials
- Azure application and service principal with the role-based access control, seeHow to: Use the portal to create an Azure AD application and service principal that can access resources.
- Once the service principal is created, make a note of the following details:
- Azure Subscriber ID
- Tenant ID
- Application ID
- Secret Key
- Perform the change management on the MCN/SD-WAN Center using the ctx-sdw-sw-xxxxxxx.zip.
- From Citrix SD-WAN Center, discover the MCN and pull the active config.
To deploy Citrix SD-WAN on Azure from SD-WAN Center, navigate toConfiguration > Cloud Connectivity > Azure > Automated Azure Deployment.
Log in with Citrix Cloud credentials.
Automated Azure deployment
ClickSettingsoption and provide the Azure subscription details. Click Pull Active Config option to retrieve the active running config from the MCN.
Deploy Citrix SD-WAN in Azure
To deploy the Citrix SD-WAN in Microsoft Azure:
ClickAdd a Siteto add a new SD-WAN instance. It initiates the creation of an SD-WAN virtual machine on Azure under your current subscription.
As part of this deployment, it also:
- Automatically adds SD-WAN configuration for the newly added site to the current active configuration on MCN.
- Performs the change management.
- Apply the MCN’s software version and configuration to this new site.
Complete theBasic settings, Virtual Machine,andVirtual Networksettings.
在基本设置,选择地区和resource group from the drop-down list. Once the region is selected, the resource group drop-down list shows all the existing resource groups in this region under this subscription.
NOTE:
To add a site, the resource group must be empty.
You can choose an existing empty resource group or clickCreate Newoption to create a new one.
Site name is auto generated with the region name. You can still edit the site name as needed.
NOTE:
Ensure that the site name maintains the SD-WAN site name requirements and is unique in the SD-WAN network.
Azure VM的名字是来自网站的名称inAZ-regionname-sitenameformat.
ClickNextto configure the virtual machine.
Provide a User name, Password, and Confirm password. By default, the VM size is auto filled with the standard size. ClickChange Sizeto select a different VM size if needed.
NOTE:
This user credential provided during deployment has read-only access to the Azure SD-WAN. For administrative privileges, use admin credentials.
- ClickNextto perform the virtual network settings.
Select virtual network from the drop-down list. The list contains all the virtual network in the chosen Azure region.
You can deploy the site on an existing virtual network or create a new virtual network. ClickCreate Newto create a new virtual network. Provide the Virtual network name, Address space (specify a custom private IP address space), Subnet name, and Subnet address space.
Select a subnet for management.
You can also create a subnet using theCreate a Subnetoption (from the top right corner).
From the drop-down list, choose different subnet for LAN and WAN and provide theRouting Table Namealong with theRouting Table Address Prefix. TheRouting Table Address Prefixis the destination address space that is redirected to this SD-WAN appliance. Other target address will be redirected by Azure routing.
NOTE:
The Routing Table is associated with the LAN subnet. If the chosen LAN subnet already has an associated route table, then that route table will be displayed and cannot be modified. Otherwise you can specify the routing table name.
ClickNextto review and confirm the setting detail and clickCreate.
A status message appears on the top stating that the deployment initiated successfully.
The deployment might take time to complete so it is recommended that you clickView Statusto get the latest update about the deployment status.
As part of the deployment:
- The virtual machine is created in the selected Azure region.
- A site is automatically added to the active SD-WAN configuration in the SD-WAN.
- Change management is performed on the newly provisioned Azure VM.
Once the deployment is succeeded, the virtual paths are formed between the MCN and Azure site. If the deployment encounters error, the process is rolled back and all the auto-created resources are reverted.
By default, the site is placed as part of the default routing domain. It belongs to the default region using the default auto path group.
- Site Name: Name of the Citrix SD-WAN site. This site name is used in the Citrix SD-WAN configuration.
- VM Name: Name of the Virtual Machine (VM) that is provisioned in Azure.
- VM Size: The VM size that was selected while creating the site.
- Management IP: Management IP address that was assigned to the newly created SD-WAN VM.
Resource Group: Resource groups are logical constructs and data exchange across resource groups is always possible. The Azure virtual machine belongs to this resource group. The new resources created during the deployment of the Citrix SD-WAN, are grouped under this resource group. If there is any error during the deployment, the resources created in this resource group will be deleted.
- Azure Region: Represents the location of the resource group and its resources.
- VNet: Virtual network that is being used by the site.
- Status: Provides the VM’s status.
ClickRefreshbutton to get the latest site status. You canStartorStopthe VM anytime for the selected site. You can select only one site at a time.
When the deployment is complete, login to MCN or Citrix SD-WAN Center to view the status of virtual paths.