Adding LAN Segments
You add LAN segments from the Site Name page.
To add a LAN segment:
- Click Resources > Site Management.
The Sites page appears.
- Click the site for which you want to add the LAN segment.
The Site-Name page appears.
- Click the add icon (+) on the LAN tab.
The Add LAN Segment page appears.
- Complete the configuration settings according to the guidelines
provided in Table 1.
Fields marked with an asterisk (*) are mandatory.
- Click OK.
You are returned to the Site-Name page, where the LAN segment that you added is displayed.
Table 1: Add LAN Segment Settings
Enter a name for the LAN segment.
The name for a LAN segment should be a unique string of alphanumeric characters and some special characters (. -). No spaces are allowed and the maximum length allowed is 15 characters.
Note: This field is displayed only for LAN segments associated with enterprise hub sites.
Select the type of LAN segment:
Enter the VLAN ID for the LAN segment.
Range: 2 through 4093.
Select a department to which the LAN segment is assigned.
Alternatively, click the Create Department link to create a new department and assign the LAN segment to it. See Add a Department for details.
You can group LAN segments as departments for ease of management and for applying policies at the department-level. For LAN segments that are dynamically routed, you can assign only a data center department.
For dynamically routed LAN segments, select the routing protocol (BGP or OSPF) to be used by the data center department to learn routes from the data center.
Advertise LAN Prefix
For dynamically routed LAN segments, click the toggle button to advertise the LAN prefix of the SD-WAN spoke site to the data center through the data center department associated with the enterprise hub.
By default, the Advertise LAN Prefix field is disabled.
Note: You must avoid overlapping IP addresses between the SD-WAN LAN network and the datacenter network.
Enter a valid gateway IP address and mask for the LAN segment. This address will be the default gateway for endpoints in this LAN segment.
For example: 192.0.2.8/24.
For directly connected LAN segments, click the toggle button to enable DHCP (default).
You can enable DHCP if you want to assign IP addresses by using a DHCP server or disable DHCP if you want to assign a static IP address to the LAN segment.
Note: If you enable DHCP, additional fields appear on the page.
Additional fields related to DHCP
Address Range Low
Enter the starting IP address in the range of IP addresses that can be allocated by the DHCP server to the LAN segment.
Address Range High
Enter the ending IP address in the range of IP addresses that can be allocated by the DHCP server to the LAN segment.
Maximum Lease Time
Specify the maximum duration (in seconds) for which a client can request for and hold a lease on the DHCP server.
Range: 0 through 4,294,967,295 seconds.
Specify one or more IPv4 addresses of the DNS server.
To enter more than one DNS server address, type the address, press Enter, and then type the next address.
Note: DNS servers are used to resolve hostnames into IP addresses.
For sites with SD-WAN capability, the CPE Ports field is disabled and the CPE ports that you can include in the LAN segment are listed.
Select the ports from the Available column and click the right-arrow to move the ports to the Selected column.
Note: This section is displayed only for dynamic routed LAN segments with BGP specified as the protocol.
Select the BGP route authentication method to be used:
Peer IP Address
Enter the IP address of the BGP neighbor.
Peer AS Number
Enter the autonomous system (AS) number of the BGP neighbor.
If you specified that MD5 should be used for authentication, specify an MD5 authentication key (password), which is used to verify the authenticity of BGP packets.
Note: This section is displayed only for dynamic routed LAN segments with OSPF specified as the protocol.
OSPF Area ID
Specify the OSPF area identifier to be used for the dynamic route.
Select the OSPF route authentication method to be used:
Enter the password to be used to verify the authenticity of OSPF packets.
Retype the password for confirmation purposes.
MD5 Auth Key ID
If you specified that MD5 should be used for authentication, enter the OSPF MD5 authentication key ID.
Range: 1 through 255.
If you specified that MD5 should be used for authentication, enter an MD5 authentication key, which is used to verify the authenticity of OSPF packets.