Prerequisites for Edge Spoke Gateway Deployment for On-Premises

The following are the prerequisites to deploy an Aviatrix Edge Spoke Gateway for on-premises on the Aviatrix Edge platform.

1. Procure the Edge Device

If you do not already have your edge device, you need to evaluate the hardware that you require for your edge computing and procure the hardware. Contact your Aviatrix account manager for the hardware you may require.

For a list of Aviatrix supported hardware appliances, see Supported Edge Hardware for the Aviatrix Edge Platform.

2. Obtain the Device Serial Number

To onboard and register edge device with the Aviatrix Edge platform, you will be required to provide the device serial number. Obtain the serial number for your edge device.

3. Set Up the Aviatrix Edge Platform Account

To onboard and register the edge device requires an Aviatrix Edge Platform Account.

To set up the Aviatrix Edge Platform Account, see Setting up Accounts for Edge Platforms.

4. Onboard the Edge Hardware

You must onboard and register the edge device before you can deploy an Edge Gateway on the device.

To onboard the edge device, see Onboarding an Edge Device for the Aviatrix Edge Platform.

5. Obtain Edge Gateway Interface IP Configurations

The Edge Spoke Gateway on the Aviatrix Edge Platform supports one WAN, one LAN, and one Management interface.

You will need to provide the following information during Edge Gateway creation for your primary and secondary HA Edge Gateways.

WAN Interface

Description

Interface CIDR

The CIDR for the WAN interface.

Interface CIDR must be in the format interface_ip/netmask (for example, 192.18.20.1/24).

Default Gateway IP

The Default Gateway IP address for the WAN interface.

For CSP underlay, this is the remote side IP address of the BGP session on CSP VNG or VGW.

Public IP

The public IP for the WAN interface.

The public IP of the WAN interface is used for peering connections over the public network.

LAN Interface

Description

Interface CIDR

The native VLAN interface IP address.

This interface is where untagged packets are sent.

Default Gateway IP

The Default Gateway IP address for the native VLAN interface.

VRRP Gateway IP

The Virtual IP for the VRRP Gateway, when VRRP is enabled.

Not required if not using Virtual Router Redundancy Protocol (VRRP).

VLAN ID

The VLAN ID of the VLAN segment.

VLAN ID must be a number between 2 and 4092.

VLAN Interface CIDR

The VLAN IP address of the VLAN segment.

Default Gateway IP

The Default Gateway IP address of the VLAN segment.

MGMT Interface	Description
IP Assignment	The MGMT interface defaults to DHCP. This setting cannot be changed. The Edge Gateway will automatically NAT out of the physical MGMT interface of the edge node when using the Aviatrix Edge platform.
Private Network	Leave this setting to Off. The Edge Gateway on the edge hardware requires public Internet reachability to connect to the Aviatrix Controller and Aviatrix Edge infrastructure in the cloud.
Egress CIDR (Primary)	The Egress CIDR is the public IP address which the Management interface uses. If the Public IP is used from Edge Gateway Management interface to establish connectivity to Aviatrix Controller, then configure the Public IP as the CIDR. The CIDR is then added to the Controller security group to allow incoming traffic from the Edge Gateway.
Egress CIDR (Secondary)	The Egress Public IP for the secondary Edge Gateway’s Management interface when High Availability is configured.

MGMT Interface

Description

IP Assignment

The MGMT interface defaults to DHCP.

This setting cannot be changed.

The Edge Gateway will automatically NAT out of the physical MGMT interface of the edge node when using the Aviatrix Edge platform.

Private Network

Leave this setting to Off.

The Edge Gateway on the edge hardware requires public Internet reachability to connect to the Aviatrix Controller and Aviatrix Edge infrastructure in the cloud.

Egress CIDR (Primary)

The Egress CIDR is the public IP address which the Management interface uses.

If the Public IP is used from Edge Gateway Management interface to establish connectivity to Aviatrix Controller, then configure the Public IP as the CIDR. The CIDR is then added to the Controller security group to allow incoming traffic from the Edge Gateway.

Egress CIDR (Secondary)

The Egress Public IP for the secondary Edge Gateway’s Management interface when High Availability is configured.

6. Provide Network Access

Aviatrix Edge Gateway requires outbound access to communicate with the Aviatrix Controller, Aviatrix CoPilot, and other Aviatrix Gateways. You must allow access on the specified ports on your firewall.

For all Edge Gateway outbound access requirements, see Aviatrix Products: Required Access for External Sites on the Aviatrix Customer Support website.