Managing LAN Segments on a Tenant Site

Type

Note: This field is displayed only for LAN segments associated with enterprise hub sites.

Select the type of LAN segment:

• Directly Connected (default)—Indicates that the LAN segment is directly connected to the site.

• Dynamic Routed—Indicates that the LAN segment is not directly connected to the site and is reachable by using a dynamic route. If you select this option, you must specify the dynamic routing information.

Department

Select a department to which the LAN segment is assigned.

Alternatively, click the Create Department link to create a new department and assign the LAN segment to it. See Adding a Department for details.

You can group LAN segments as departments for ease of management and for applying policies at the department-level. For LAN segments that are dynamically routed, you can assign only a data center department.

Advertise LAN Prefix

For dynamically routed LAN segments, click the toggle button to advertise the LAN prefix of the SD-WAN spoke site to the data center through the data center department associated with the enterprise hub.

By default, the advertise LAN prefix field is disabled.

Note: You must avoid overlapping IP addresses between the SD-WAN LAN network and the datacenter network.

DHCP

For directly connected LAN segments, click the toggle button to enable DHCP (default).

You can enable DHCP if you want to assign IP addresses by using a DHCP server or disable DHCP if you want to assign a static IP address to the LAN segment.

Note: If you enable DHCP, additional fields appear on the page.

Address Range Low

Enter the starting IP address in the range of IP addresses that can be allocated by the DHCP server to the LAN segment.

Maximum Lease Time

Specify the maximum duration (in seconds) for which a client can request for and hold a lease on the DHCP server.

Default: 1440

Range: 0 through 4,294,967,295 seconds.

CPE Ports

• For sites with LAN capability, click the toggle button to include or exclude the CPE in the LAN segment.

  • When you include the CPE in the LAN segment:

    • CPE ports that you can include in the LAN segment are listed.

      Select the ports from the Available column and click the right-arrow to move the ports to the Selected column.

    • The Switch Ports field is disabled. CSO automatically assigns LAN ports on the Switch device and creates the same LAN segment on the Switch.

  • If you click to exclude the CPE from the LAN segment, you must specify the switch ports that connect with the LAN in the Switch Ports field.

    CSO automatically assigns LAN ports on the CPE device and creates the same LAN segment on the CPE device.

    Note: You can select only one port if the CPE is a physical SRX Series device.

• For sites without LAN capability, the CPE Ports field is disabled and the CPE ports that you can include in the LAN segment are listed.

  Select the ports from the Available column and click the right-arrow to move the ports to the Selected column.

BGP Configuration

Note: This section is displayed only for dynamic routed LAN segments with BGP specified as the protocol.

Peer IP Address

Enter the IP address of the BGP neighbor.

Auth Key

If you specified that MD5 should be used for authentication, specify an MD5 authentication key (password), which is used to verify the authenticity of BGP packets.

OSPF Area ID

Specify the OSPF area identifier to be used for the dynamic route.

Password

Enter the password to be used to verify the authenticity of OSPF packets.

MD5 Auth Key ID

If you specified that MD5 should be used for authentication, enter the OSPF MD5 authentication key ID.

Range: 1 through 255.