Internet status not available
- Verify physical cabling.
- Ensure that the SD-WAN Edge 3400 MAC address is learned on the correct port or VLAN.
- For static IP, verify that the IP address or mask and gateway are properly configured.
- Verify that the VMware SD-WAN Gateway is reachable.
Verify the SD-WAN Edge 3400 MAC address is listed on the gateway
You can verify that the SD-WAN Edge 3400 MAC is seen on the gateway to confirm Layer 2 connectivity.
![MAC Address listing](https://cdn-prod.scdn6.secure.raxcdn.com/static/media/9198938f-8c47-5a0e-82d9-6db6a62cd3f7/bf1b5b10-0882-44aa-b297-e48e21aeb1c5/out/g-g3-properties=GUID-03F8582F-7A7F-40E5-BEC9-CEA9D615FD76=1=en-us=Low.png)
The following figure shows results of arp- n from a device on the same network segment.
![arp -n command results](https://cdn-prod.scdn6.secure.raxcdn.com/static/media/9198938f-8c47-5a0e-82d9-6db6a62cd3f7/bf1b5b10-0882-44aa-b297-e48e21aeb1c5/out/g-arp-n-results=GUID-08C22CEC-F85B-4DB6-9C3D-90CBDFC76C6E=1=en-us=Low.png)
Verify that the gateway IP address is reachable
- Remove the configured WAN connection from the SD-WAN Edge 3400 and connect directly to a system.
- Configure the system with an identical network configuration.
- Ping the gateway address.
![Ping gateway address](https://cdn-prod.scdn6.secure.raxcdn.com/static/media/9198938f-8c47-5a0e-82d9-6db6a62cd3f7/bf1b5b10-0882-44aa-b297-e48e21aeb1c5/out/g-ping-gateway=GUID-3D021223-6BF4-46C3-92AF-5E41ED2CB1C0=1=en-us=Low.png)
If the ping fails and the gateway is a firewall, ICMP may be blocked, in which case the Internet status will remain unconnected. Wait for the retry to timeout and click Activate. Also, ensure that the SD-WAN Orchestrator IP address is reachable using TCP/443.
Verify configuration string values
When the SD-WAN Edge 3400 is updated before activation (for example, setting a static IP address), a configuration string is appended to the activation URL. This string is Base64
and is used to specify the static IP address during activation.
http://192.168.2.1/?activation_key=1X1X-1X1X-1X1X-1X1X1&custom_vco=vco109-usca1.velocloud.net&configuration=W3siaW50ZXJmYWNlIjoiR0UzIiwicHJvdG8iOiJzdGF0aWMiLCJpcCI6IjE0My4xNjYuODEuMjIiLCJnYXRld2F5IjoiMTQzLjE2Ni44MS4xIiwibmV0bWFzayI6IjI1NS4yNTUuMjU1LjAifV0
The configuration string can be decoded to verify that the profile is configured accurately. Using the above value, the correct IP address is verified.
[{"interface":"GE5","proto":"static","ip":"143.166.81.29","gateway":"143.166.81.1","netmask":"255.255.255.0"}]
VMware SD-WAN Orchestrator is unavailable
If you receive the error that the SD-WAN Orchestrator is not reachable, follow these steps:
- Change the SD-WAN Orchestrator FQDN to an IP address. You can use the nslookup command to verify the IP address of the SD-WAN Orchestrator address listed in the activation email.
Figure 9. Change SD-WAN Orchestrator FQDN to IP address - Check the ignore certificates with the SD-WAN Orchestrator IP address.
- Verify that the next-hop device such as a firewall, is not applying an outbound filter to the SD-WAN Orchestrator IP address for TCP/443.
- Check the firewall logs for any blocked traffic that matches the SD-WAN Orchestrator IP address.