Aruba Virtual Gateway (SD-WAN)

The Aruba Virtual Gateway (VGW) CloudFormation template (hereinafter referred to as CFT) will make it easier for users to deploy and run a virtual gateway in an Amazon VPC. CFT currently supports three types of EC2 instances, with throughput of 500 Mbps, 2 Gbps, and 4 Gbps, respectively. Users must use an EC2 instance that matches the subscription type to launch VGW; 500Mbps VGW requires a C4.xLarge instance, a 2Gbps VGW requires a C4.2xLarge instance, and a 4Gbps VGW requires a C4.4xLarge instance. Depending on the instance selected, CFT will create a volume of 15 GB, 30 GB, or 60 GB of space to match the corresponding instance.

CFT will prompt users to enter information such as available public cloud regions, VPC subnet information, SSH keys, security groups, names, and user data during deployment. You need to refer to the following link to extract user data from Aruba Central. https://help.central.arubanetworks.com/latest/documentation/online_help/content/gateways/vgw/vgw_deploy_manual.htm 

• The Aruba vGW requires four network interfaces. CFT will create four interfaces and subnets accordingly; corresponding to the management subnet, interconnect subnet, VPN subnet, and LAN subnet respectively.
• Aruba vGW must be mapped to a public IP address. Therefore, CFT will request an elastic IP and associate it with an internet subnet interface
• CFT will create a security group and add a rule to allow inbound UDP port 4500 (to allow the peer to establish an IPSec tunnel with VGW).
• When the vGW virtual machine starts, as described above, it will provide 4 interfaces and volume storage. This information corresponds to the user data files obtained from Aruba Central