Volume 2

Skysman

Thu, 04/10/2025 - 03:51

Hi Ivan!
I have started my journey with volume 2 and I stack in constructing the lab in Page 23 Figure 13.16.
There is not much information about DC2 (DR), and here're my inquiries:

1- Is the DC2 control plane considered a separate control plane that uses a different Root CA than DC1 or it uses the same Root CA that I generate in DC1?

2- If DC2 requires a different Root CA, then I believe this is what I need to do:
a- Add DC2 vSmart and vBond to DC2 vManage, and generate CSRs for the three DC2 controllers and use them for generating DC2 controller certificates.
b- The same generated WAN Edge router CSR can be used to generate two Edge router certificates, one from each DC.
c- The vbond IP addresses in the System section of each Wan Edge router should point to the vBond IP addresses of of both DC1 and DC2.