Service Dual Router HA Feature

Configure Service Dual Router HA feature (this feature is only applicable to dual-edge configuration groups).

Diagram

Classes

sdwan

Name	Type	Constraint	Mandatory	Default Value
feature_profiles	Class	feature_profiles	No

feature_profiles (sdwan)

Name	Type	Constraint	Mandatory	Default Value
service_profiles	List	service_profiles	No

service_profiles (sdwan.feature_profiles)

Name	Type	Constraint	Mandatory	Default Value
dual_router_ha_features	List	dual_router_ha_features	No

dual_router_ha_features (sdwan.feature_profiles.service_profiles)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[^&<>! "]{1,128}$	Yes
description	String		No
enable_optimize_paths	Boolean	true, false	No
redundancy_groups	List	redundancy_groups	Yes

redundancy_groups (sdwan.feature_profiles.service_profiles.dual_router_ha_features)

Name	Type	Constraint	Mandatory	Default Value
group_id	Integer	min: 1, max: 2	No
tag_name	String	Regex: ^[^&<>! "]{1,128}$	No
vpn_names	List	String[min: 1, max: 244]	No

Examples

Example-1: Dual Router High Availability for a Branch with Redundant Service VPNs

A financial services company deploys two edge routers at each large branch to remove the router as a single point of failure. Corporate traffic (VPN 10) and guest/partner traffic (VPN 20) must both survive the loss of either router, and traffic should keep using the shortest path across the pair instead of hair-pinning through the peer router.

The dual_router_ha_features configuration below groups the two service VPNs into two redundancy groups. Group 1 carries the corporate LAN VPN and is tagged primary-router, so the first router of the pair owns it under normal conditions. Group 2 carries the guest LAN VPN and is tagged secondary-router, so the second router owns it. If a router fails, its groups are taken over by the peer. enable_optimize_paths is set to true so that the pair advertises optimized paths and avoids unnecessary inter-router forwarding.

sdwan:
  feature_profiles:
    service_profiles:
      - name: BRANCH-DUAL-ROUTER
        description: Branch service profile with dual router high availability
        lan_vpns:
          - name: CORP-VPN
            description: Corporate LAN VPN
            vpn_id: 10
            vpn_name: VPN10
          - name: GUEST-VPN
            description: Guest LAN VPN
            vpn_id: 20
            vpn_name: VPN20

        dual_router_ha_features:
          - name: BRANCH-DUAL-ROUTER-HA
            description: Dual router HA for corporate and guest service VPNs
            enable_optimize_paths: true
            redundancy_groups:
              - group_id: 1
                tag_name: primary-router
                vpn_names:
                  - CORP-VPN
              - group_id: 2
                tag_name: secondary-router
                vpn_names:
                  - GUEST-VPN