SDWAN Bài 7 Cấp internet cho vedge (Direct Internet Access DIA)

TRUY CẬP INTERNET CHO vEDGE

Mô hình:

Cấu hình bằng CLI:

policy
 data-policy _vpn10_go_internet
  vpn-list vpn10
    sequence 1
     match
      source-data-prefix-list PC_9
      destination-data-prefix-list DNS_GG
     !
     action accept
      nat use-vpn 0
      
     !
    !
  default-action accept
 !
 lists
  data-prefix-list PC_9
   ip-prefix 10.1.9.0/24 
  !
  data-prefix-list DNS_GG
   ip-prefix 8.8.8.8/32 
  !
  site-list hai-site-list
   site-id 2-3 
  !
  vpn-list vpn10
   vpn 10 
  !
 !
!
apply-policy
 site-list hai-site-list
  data-policy _vpn10_go_internet from-service
 !
!

Trên vedge:

VPN0:

---------
vpn 0
 interface ge0/0
  ip address 192.168.1.10/24
  nat

 interface ge0/1
  ip address 192.168.11.10/24
  nat

-----------

VPN10:

vpn 10
 interface ge0/3
  ip address 10.1.9.1/24
  no shutdown
 !
 ip route 0.0.0.0/0 vpn 0
 omp
  advertise connected

KẾT QUẢ:

vEdge1_temp_configed# ping 8.8.8.8 vpn 10                  
Ping in VPN 10
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=126 time=45.0 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=126 time=35.0 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=126 time=42.7 ms
64 bytes from 8.8.8.8: icmp_seq=4 ttl=126 time=40.9 ms

Tham khảo : https://fastreroute.com/cisco-sd-wan-direct-internet-access-dia-step-by-step/