Natively Integrate a VOS Cloud Gateway on an Azure Virtual WAN Hub

Before You Begin

Before you install the Versa SASE cloud gateway on an Azure Virtual WAN:

• Create a Network Virtual Appliance in an Azure Virtual WAN hub. For more information, refer to the Azure documentation.
• Connect the required virtual networks (VNets) to a Virtual WAN hub. For more information, refer to the Azure documentation.
• Send an email to Versa Networks Customer Support at support@versa-networks.com to request the custom cloud-init file for your enterprise. When you receive the file, upload it to the Azure portal so you can use it for the VOS cloud gateway installation.

Create a Template for VOS Cloud Gateway

To create a template for the VOS cloud gateway:

1. In Director view, select the Workflows tab in the top menu bar.
2. Select Template > Templates in the left menu bar.
3. Click the Add icon to create a new template. The Create Template steps display.
   
   
    
4. Select step 1, Basic, and enter a name for the template (here, the name is versa-sase-in-vwan-01). For information about configuring the other fields, see Create and Manage Staging and Post-Staging Templates.
5. Select step 2, Interfaces.
6. Click a port icon to the right of the Number of Ports field, click WAN from the popup list, and then select vni-0/0 as the WAN interface.
   
   
7. Click another port icon, click LAN from the popup list, and then select vni-0/1 as the LAN interface.
8. Select step 4, Routing, and in the BGP group of fields, enter information to configure BGP routing.
   
   
9. Click Save.
10. Commit the template.

Create a VOS Device

To create a VOS device to associate with the cloud gateway:

1. In Director view, select the Workflows tab in the top menu bar.
2. Select an organization in the horizontal menu bar.
3. Select Devices > Devices in the left menu bar.
4. Click the Add icon to add a device. The Configure Basic screen displays.
   
   
5. Select step 1, Basic, and enter a name for the device (here, the name is versa-sase-in-vwan-01). For information about configuring the other fields, see Create Devices and Device Groups.
6. Select step 4, Bind Data.
7. On the User Input tab, select the Post-Staging Template tab, and in the Data column, enter the bind data information.
   • BGP local AS number
   • BGP neighbor IP addresses
   • BGP peer AS numbers
     Note that these values are displayed on the screen in Step 8 in Create a VOS Cloud Gateway on an Azure Virtual WAN, below.
     
     
8. Click Next.
9. Click Save.

Assign a Custom Role to a User-Managed Identity in an Azure Virtual WAN

Before you create a VOS cloud gateway on an Azure virtual WAN, you need to create a custom role, and then assign the custom role to a user-managed identity.

1.  Create a custom role with required permissions. To create a custom role, see the Microsoft Azure article on the Microsoft website.  The following screenshot is an example of a custom role created with required permissions.
   
   
2. Create a user-managed identity, and then assign the custom role to the user-assigned managed identity. To create a user-managed identity, see the Microsoft Azure article on the Microsoft website. The following screenshot is an example of a user-managed identity.
   
   
3. Send an email to Versa Networks Customer Support at support@versa-networks.com to request the custom cloud-init file for your enterprise. The solution supports Versa cloud gateway with express route connectivity, and Versa cloud gateway without express route connectivity configuration.

Create a VOS Cloud Gateway on an Azure Virtual WAN

You can use the VOS custom cloud-init file to install the Versa VOS Cloud Gateway in an Azure virtual WAN.

To install the VOS Cloud Gateway:

1. Open the Azure website and select Marketplace.
2. Select Versa SD-WAN and NGFW for Azure Virtual WAN.
3. In the Azure Marketplace left menu bar, select Get Started. In the Search the Marketplace search bar, search for Versa, and then select Versa SD-WAN and NGFW for Azure Virtual WAN in the search results.
4. In the Versa SD-WAN and NGFW for Azure Virtual WAN search result, click Create and select any one of the following solutions:
   • Versa SD-WAN & NGFW with Express Route for Azure Virtual WAN
   • Versa SD-WAN & NGFW without Express Route for Azure Virtual WAN
     
     
5. Select the Basics tab, and then enter information for the Subscription, Resource Group, and Region fields. Note that the subscription ID for Versa is Pay-As-You-Go.
   
   
6. In the User assigned managed identity section, click the + Add icon, and then select the user managed identity you created in the Assign a Custom Role to a User-Managed Identity in an Azure Virtual WAN section (here, vWAN-NVA-Identity).
   
   
7. Click Next.
8. On the Versa VOS in vWAN tab, enter information for the following fields.
   
   
    

   Field	Description
   Virtual WAN Hub	Select the Virtual WAN hub to use to deploy the network virtual appliance (NVA).
   VOS vWAN Cluster Name	Enter the Versa SASE cluster name. The name can include letters, numbers, and dashes, and it can be from 3 to 32 characters long.
   VOS Version	Select the VOS version to deploy. The default VOS version is Release 22.1.4.
   Scale unit	Enter the scale unit to determine the size and number of resources deployed: 4 scale units (2 Gbps) 10 scale units (5 Gbps) 20 scale units (10 Gbps)
   Versa BGP ASN	Enter the BGP AS number (ASN) for Versa. Default: 64514 (default Versa LAN ASN for BGP peering)
   Express Route Connectivity	Select the express route connectivity: Yes—Select if express route connectivity is needed on the vWAN hub through the VOS cloud gateway. No
   User Custom Data	Click the folder icon and upload the VOS cloud-init file for staging to your enterprise headend. For more information about receiving this file from Versa Networks Customer Support, see Before You Begin, above.

   
   Note that you must enter the BGP neighbor IP addresses and BGP ASN values displayed on this screen when configuring the device bind data in Create a VOS Device, above.
9. Click Next: Review + Create. Select the "I agree to the terms and conditions above" check box and click Create.
   
   

Supported Software Information

Releases 21.1.3 and later support all content described in this article.

Additional Information

Configure Basic Features
Create and Manage Staging and Post-Staging Templates