Skip to content
Megaport ONE Documentation
Connecting MVEs

Connecting MVEs Integrated with Aruba EdgeConnect SD-WAN

This topic describes how to connect a Megaport Virtual Edge (MVE) integrated with Aruba EdgeConnect SD-WAN to another MVE.

This deployment uses the Megaport private software defined network (SDN) to reduce reliance on the internet and connect enterprise branch locations.

Branch to branch

With two MVEs configured, you can create a private VXC to connect them on the Megaport network without the need for any physical infrastructure. A VXC is essentially a private point-to-point Ethernet connection between an A-End MVE and a B-End MVE.

Note

The internet-facing interface on an MVE can reach the internet-facing interface on another MVE over the public internet. That is, you can exchange traffic from MVE to MVE in different metros over the internet. The basic connection model consists of an MVE at one metro connecting via IP Transit to an MVE at another metro. Connectivity consists of a customer/SD-WAN partner managed connection, not Megaport managed.

Before you begin

Provision two MVEs in different locations. If you haven’t already created MVEs, see Creating an MVE in Aruba.

Creating a VXC between two MVEs

A private VXC deployment between two MVEs integrated with Aruba starts in the Megaport ONE Portal. To complete the configuration, you use the Aruba Orchestrator console.

To create a VXC

  1. In the Megaport ONE Portal, choose Networking > Services.
  2. Click the gear icon Gear icon next to the originating A-End MVE and select Add Connection.
  3. Select Private Virtual Cross Connect as the Connection Type. Private VXC
  4. Select the destination B-End MVE and location.
    Search for your preferred data center using the Country drop-down list, or enter a search term to filter results as you type. Click Clear Filters to reset the filters.
    Specify B-End

  5. Specify the VXC details:

    • Connection Name – Specify a name for the VXC that is easily identifiable. For example, LA MVE 2 to Dallas MVE 4. You can change the name later, if you like.
    • Rate Limit (Mbps) – Specify a rate limit. The maximum speed is displayed. Although the rate limit for a VXC can be up to 10 Gbps, the compute capacity of the A-End or B-End MVE can influence the circuit throughput. Consult Aruba’s documentation for details.
    • Preferred VLAN – Specify the 802.1q VLAN tag for this connection. Each VXC is delivered as a separate VLAN on the MVE. The VLAN ID must be unique on this MVE and can range from 2 to 4093. Megaport ONE will attempt to use the same VLAN ID at both MVE instances. If you specify a VLAN ID that is already in use, you will be notified when placing the MVE order.
      Private VXC details

  6. Specify the billing details:

    • Service Level Reference (optional) – Specify a unique identifying number for the VXC to be used for billing purposes, such as a cost center number or a unique customer ID. The service level reference number appears for each service under the Product section of the invoice. You can also edit this field for an existing service.
    • Monthly Price – The monthly rate is based on location and size.
    • Promo Code – If you have a promo code, enter it and click Add Code.

  7. Click Create Connection to view the Summary screen.

  8. Review the configuration and click Confirm.

Once the VXC is deployed, you can view it in the Megaport ONE Portal Networking > Services page under the A-End MVE and the B-End MVE. Note that the service ID number is the same for the VXC at both ends of the connection.

The next step is to configure the A-End and B-End MVEs in Aruba Orchestrator.

Note

The next procedure configures IP connectivity with BGP, providing just one solution out of many. Consult your SD-WAN vendor documentation for specific network design and configuration options before configuring interfaces for the MVEs.

Configuring the A-End MVE in Orchestrator

After you create the VXC between your MVEs, you need to configure it in Orchestrator. This involves configuring LAN interfaces.

To configure the A-End appliance

  1. Log in to your enterprise Aruba Orchestrator system.

  2. Choose Configuration > Discovery | Discovered Appliances or click Appliances Discovered on the upper right of the screen.

  3. Select the A-End MVE.

  4. Go to the System menu and choose Interface.

  5. Choose Configuration > Networking | Deployment.

  6. Locate the appliance by the hostname and click the Edit (pencil) icon.
    Edit appliance

  7. Add a new LAN side interface: Click +Add next to LAN Interfaces.

    Note

    If this is the first LAN side service connection, click +Add. If you already have a LAN interface, click +IP under the Interface drop-down list to add a new configuration.

    Here is a screen with sample values.

    Aruba LAN interface details

  8. In the Interface dropdown menu, choose wan0.

  9. In the VLAN field, enter the A-End VLAN value for this connection from the Megaport ONE Portal.
    Click the Details icon for the connection in the Megaport ONE Portal to find this value. Note that it might be different from the B-End VLAN ID.

  10. Optionally, select a preconfigured Label or select None.
  11. In the IP/Mask field, enter the A-End interface IP Address and subnet mask as required for your network.
  12. For the Next Hop, enter the B-End IP address.
  13. Specify in and out bandwidth values.
    The bandwidth must be equal to or less than the MVE bandwidth limit.
  14. Click Apply.
  15. If prompted, reboot the appliance.
    At this point, the A-End interface is created. Once the device is reachable from Orchestrator, you can configure a Border Gateway Protocol (BGP) session.

To set up the MVEs to exchange routing information, follow the steps in To configure BGP in Orchestrator.

Configuring the B-End MVE in Orchestrator

  1. Log in to your enterprise Aruba Orchestrator system.

  2. Choose Configuration > Discovery | Discovered Appliances or click Appliances Discovered on the upper right of the screen.

  3. Select the B-End MVE.

  4. Go to the System menu and choose Interface.

  5. Choose Configuration > Networking | Deployment.

  6. Locate the appliance by the hostname and click the Edit (pencil) icon.
    Edit appliance

  7. Add a new LAN side Interface: Click +Add next to LAN Interfaces.

    Note

    If this is the first LAN side service connection, click +Add. If you already have a LAN interface, click +IP under the Interface drop-down list to add a new configuration.

    Here is a screen with sample values.

    Aruba LAN interface details

  8. In the Interface dropdown menu, choose wan0.

  9. In the VLAN field, enter the B-End VLAN value for this connection from the Megaport ONE Portal.
    Click the Details icon for the connection in the Megaport ONE Portal to find this value. Note that it might be different from the A-End VLAN ID.

  10. Optionally, select a preconfigured Label or select None.
  11. In the IP/Mask field, enter the B-End interface IP Address and subnet mask as required for your network. This value is the Customer IP Address from the AWS connection details in the Megaport ONE Portal.
  12. For the Next Hop, enter the A-End IP address.
  13. Specify in and out bandwidth values.
    The bandwidth must be equal to or less than the MVE bandwidth limit.
  14. Click Apply.
  15. If prompted, reboot the appliance.
    A reboot is required only when adding the first LAN interface, as the system switches the appliance from server mode to router mode.

At this point, the B-End interface is created. The next step is to optionally create a Border Gateway Protocol (BGP) session.

To configure a BGP neighbor (optional)

  1. In Orchestrator, go to Configuration > Networking | BGP.

  2. Click the Edit (pencil) icon for the appliance.

  3. Move the slider to Enable BGP.

  4. Provide the local AS number.
    This is the Customer ASN (your local MVE), collected in step 1.

  5. In the Router ID field, enter a system IP as required by your network design.
    You can use any IP address on the MVE, such as the loopback 0 IP specified during the initial acceptance of the appliance, the interface IP on the MVE side of the VXC, or the transit IP address.
    Add BGP peer for Aruba

  6. In the BGP Peers section, click Add and provide the following information:

    • Peer IP – Enter the neighbor/peer IP address.
    • Local Interface – Choose the associated LAN interface (the interface is in the format wan0.{VLAN ID}.
    • Peer ASN – Enter the peer ASN.
    • Peer Type – Choose Branch.
    • Enable MD5 Password – If required, select this and then enter and confirm your MD5 password.
      Add BGP peer for Aruba

  7. Click Add.

  8. Click Apply.
    It takes several seconds for the configuration to be pushed to the appliance. Click the refresh icon to update the data from the appliance.

When successful, the Peer State indicates Established:

BGP peer state for Aruba

Validating your connection

You can review connection details, including the connection state, from the CLI with these commands:

  • show interface wan0.<subinterface id> – Displays configuration details and current status for the appliances.
  • show bgp neighbors or show bgp summary – Displays configuration details and current status for the BGP neighbors.

To start a CLI session from Orchestrator

  1. In Orchestrator, use the mouse to hover over the appliance and click the Appliance Menu icon to the right of the appliance name.
    BGP peer state for Aruba

  2. Select CLI Session from the menu.
    BGP peer state for Aruba

  3. Enter enable mode to use the recommended CLI commands to display configuration details.

Last update: 2023-05-16