VeloCloud SD-WAN Gateway Migration

Products

• VMware
• VMware SD-WAN by VeloCloud

Issue/Introduction

Keep in mind the following limitations when you migrate your Gateways:

• Self-service migration is not supported on Partner Gateways.
• There will be a minimum service disruption based on the time taken to switch NSDs from the quiesced Gateway to the new Gateway and to rebalance the Edges connected to the quiesced Gateway.
• If the NSD is configured with redundant Gateways and one of the Gateway is quiesced, the redundant Gateway cannot be the replacement Gateway for the quiesced Gateway.

Environment

VeloCloud SD-WAN

Resolution

Before you migrate the Edges and NSDs from the quiesced Gateway to the new Gateway, ensure that you schedule a maintenance window as traffic may be disrupted during migration.

Procedure

1. In the Enterprise portal, click the Open New Orchestrator UI option available at the top of the Window.
2. Click Launch New Orchestrator UI in the pop-up window. The UI opens in a new tab.
3. Go to Settings > Gateway Migration. The list of quiesced Gateways appears.
4. Click Start for the quiesced Gateway from which you want to migrate to the new Gateway.
5. Make the required configuration to all the NSDs that are configured through the quiesced Gateway.
   1. Click the View IKE IPSec link to view a sample configuration for the NSD. Copy the template and customize it to suit your deployment.
   2. Add the IP address of the new Gateway to each NSD configured for the quiesced Gateway.
      For example, if you have configured an NSD for AWS, you must add the IP address of the new Gateway in the NSD configuration in the AWS instance.
   3. After making the configuration changes to all the NSDs, select the The listed NSD site(s) have been configured check box, and then click Next.
6. Select each NSD and click Switch Gateway to switch the traffic from the quiesced Gateway to the new Gateway.

• In the Switch Gateway pop-up window, select the The NSD site has been configured check box to confirm that you have made the required configuration changes to the NSD.
• Click Switch Gateway.
• It may take few minutes to verify the tunnel status. The IP address of the quiesced Gateway is replaced with the IP address of the new Gateway so that the traffic switches to the new Gateway. The Migration Status changes to "NSD Tunnels are up and running".
• Click Next.

7. Rebalance either all Edges or the required Edges that are connected to the quiesced Gateway so that the Edges get reassigned to the new Gateway. 8. Click Finish to complete the Gateway migration.

Additional Information

What to do When Switch Gateway Action Fails

During the Gateway migration, when the Switch Gateway action for an NSD fails, perform the following steps to troubleshoot the issue:

1. In the Enterprise portal, launch the new Orchestrator UI, and then go to the Gateway Migration page.
2. Under the Switch Gateways step of the Migration Wizard, select the NSD for which the Switch Gateway action failed, and then click Retry Tunnel Verification.

   The tunnel status is verified again to see if the Migration Status changes to "NSD Tunnels are up and running".

   If the Migration Status does not change and the Switch Gateway action fails again for the NSD, select the NSD, and then click Undo Switch Gateway.

   All configuration changes to the NSD are reverted to the original settings.

3. Click Switch Gateway again to replace the IP address of the quiesced Gateway with that of the new Gateway and thereby switch the traffic to the new Gateway.
4. Rebalance the Gateway and complete the migration.