Volume 2

Wider Page

Bigger text

Coming Soon

Comments

Skysman

Thu, 10 Apr 2025 - 00:00

Hi Ivan!
I have started my journey with volume 2 and I stack in constructing the lab in Page 23 Figure 13.16.
There is not much information about DC2 (DR), and here're my inquiries:
1- Is the DC2 control plane considered a separate control plane that uses a different Root CA than DC1 or it uses the same Root CA that I generate in DC1?
2- If DC2 requires a different Root CA, then I believe this is what I need to do:
a- Add DC2 vSmart and vBond to DC2 vManage, and generate CSRs for the three DC2 controllers and use them for generating DC2 controller certificates.
b- The same generated WAN Edge router CSR can be used to generate two Edge router certificates, one from each DC.
c- The vbond IP addresses in the System section of each Wan Edge router should point to the vBond IP addresses of of both DC1 and DC2.
3- If point 2 is wrong and we need to use the same Root CA in both DC1 and DC2 then:
a- DC1 vBond and vSmart should be added to their DC1 vManage, and we do the same for DC2 by adding vBond and vSmar to DC2 vMange.
b- Generate CSR for each controller to use them for generating the controller certificates and to be added to their own vManages.
c- Onboarding a Wan Edge router requires to generate a CSR. We use the same CSR for each router to generate an Edge certificate on each vMange and get it installed in the vEdge.
I'm really confused and I hope you can answer my inquiries.
Regards,
Bassam Alkhaffaf