Internet status not available
- Verify physical cabling.
- Ensure that the SD-WAN Edge 640 MAC address is learned on the correct port or VLAN.
- For static IP, verify that the IP address or mask and gateway are properly configured.
- Verify that the VMware SD-WAN Gateway is reachable.
Verify the SD-WAN Edge 640 MAC address is listed on the gateway
You can verify that the SD-WAN Edge 640 MAC is seen on the gateway to confirm Layer 2 connectivity.
The following figure shows results of arp- n from a device on the same network segment.
Verify that the gateway IP address is reachable
- Remove the configured WAN connection from the SD-WAN Edge 640 and connect directly to a system.
- Configure the system with an identical network configuration.
- Ping the gateway address.
If the ping fails and the gateway is a firewall, ICMP may be blocked, in which case the Internet status will remain unconnected. Wait for the retry to timeout and click Activate. Also, ensure that the SD-WAN Orchestrator IP address is reachable using TCP/443.
Verify configuration string values
When the SD-WAN Edge 640 is updated before activation (for example, setting a static IP address), a configuration string is appended to the activation URL. This string is Base64
and is used to specify the static IP address during activation.
http://192.168.2.1/?activation_key=1X1X-1X1X-1X1X-1X1X1&custom_vco=54.241.216.200&configuration=W3siaW50ZXJmYWNlIjoiR0UzIiwicHJvdG8iOiJzdGF0aWMiLCJpcCI6IjE0My4xNjYuODEuMjIiLCJnYXRld2F5IjoiMTQzLjE2Ni44MS4xIiwibmV0bWFzayI6IjI1NS4yNTUuMjU1LjAifV0
The configuration string can be decoded to verify that the profile is configured accurately. Using the above value, the correct IP address is verified.
[{"interface":"GE3","proto":"static","ip":"143.166.81.29","gateway":"143.166.81.1","netmask":"255.255.255.0"}]
VMware SD-WAN Orchestrator is unavailable
If you receive the error that the SD-WAN Orchestrator is not reachable, follow these steps:
- Change the SD-WAN Orchestrator FQDN to an IP address. You can use the nslookup command to verify the IP address of the SD-WAN Orchestrator address listed in the activation email.
- Check the ignore certificates with the SD-WAN Orchestrator IP address.
- Verify that the next-hop device such as a firewall, is not applying an outbound filter to the SD-WAN Orchestrator IP address for TCP/443.
- Check the firewall logs for any blocked traffic that matches the SD-WAN Orchestrator IP address.