Activate and validate SD-WAN on two NETGEAR Insight-managed Pro Routers to ensure secure communication between multiple remote sites. After activation, SD-WAN automatically forms a mesh network between eligible routers and allows you to manage traffic efficiently. You then configure and verify policies to ensure routing, failover, and connectivity function as intended.
Before you begin
To enable SD-WAN on supported routers, the following conditions must be met:
- Configure the device to connect to the Insight management server.
- Onboard the router to the Insight Cloud Portal.
- Enable SASE Security on each router at organization and location level.For more information, see Configure NETGEAR Exium Secure Access Service Edge (SASE) on an Insight-managed Pro Router.
- A minimum of two routers are required for SD-WAN.
- Ensure routers are online and are in different locations in the same organization in Insight.
- Ensure router is in a different subnet.
- Ensure each router has a unique public IP, as the SD-WAN tunnel cannot form if locations share the same public IP address.
At least one the PR460x must have a static Public IP address
Verify SD-WAN connectivity between the Pro Routers
To verify whether SD-WAN is enabled on the routers, attempt to access the local network of one location from the other location. The connection should be successful, and traffic should be routed through the PR60X/PR460X routers deployed at both sites.
- From one location (Location A), use network diagnostic tools such as ping and traceroute to reach resources at the other location (Location B).
- Confirm that traffic reaches the remote site and follows the expected network path.
- From Location A, access services or applications hosted at Location B, such as web interfaces, file shares, or internal applications.
- Repeat the same network diagnostic and application access tests from Location B to Location A.
- Confirm that bidirectional communication and access to remote resources are successful.
- Verify that traffic is being routed through the routers at both locations. The SD-WAN should now be operational.
Successful reachability between the routers confirms that the SD-WAN tunnel is established. However, LAN-to-LAN connectivity between sites may also depend on internal routing, firewall rules, and local network configurations at each site.
For more information, see SD-WAN.