Silver Peak - Bridge to Router Mode - FireOwls All-CCIE Team

Silver Peak – Conversion of Bridge to Router Mode

This FireOwls All-CCIE Team deployment is to perform a production Silver Peak migration from Bridge Mode to Inline Router Mode. The recommended migration strategy per site is to convert one appliance at a time, with traffic being gradually moved from the Bridge Mode leg to the Inline Router Mode path, ideally using two cutover windows.

Deployment Guidelines

	The network topology is generally standardized in Los Angeles and Houston. The WAN router establishes BGP sessions with the downstream NSX environment. Upstream there is one BGP adjacency with the MPLS provider (AT&T). The current Silver Peak setup operates in bridge mode leveraging two appliances inline, with the WAN-facing device operating in bypass mode.
	Have the MPLS and Internet circuits connected to the primary appliance. In addition, the SPEC2 appliance has been placed off-path in preparation for the conversion to router mode.
	Run a new connection between the WAN switch and the router. If there are no available interfaces on the router, convert the router-facing switch port to trunk, having the current MPLS VLAN as native for that trunk.
	Configure the new router interface. Assign a new transit subnet to be used between the router and the SPEC2 appliance, ideally /29 to allow for IP allocation of the SPEC1 appliance, to be done in next steps.
	Change SPEC2 to Inline Router Mode. Traffic will continue flowing through SPEC1. At this point we have one leg in Bridge Mode and the other in Router Mode.
	Configure BGP between SPEC2 and the WAN router. Depending on the traffic selected, a temporary policy-based routing (PBR) or BGP filter can be placed.
	Adjust the policy-based routing (PBR) or BGP filter so all SD-WAN traffic traverses through SPEC2 via BGP. By using the original link from the WAN router to the MPLS VLAN, make sure BGP is established between the router and AT&T.