Citrix SD-WAN Platforms

Citrix SD-WAN on Oracle Cloud Infrastructure (Technical preview)


Citrix SD-WAN is now available for Oracle cloud as a technical preview build from 11.0.2 Onwards

You can use SD-WAN instance in Oracle cloud to connect it with the on-premise SD-WAN instance and thus access your resources inside Oracle cloud.

In the following workflow you can provision an SD-WAN instance and create three subnets for Management, LAN, and WAN.

  1. Log in to oracle cloud and choose a region where you’d wants the SD-WAN appliance deployed. Enter your credentials and once you do that you’ll be presented with the screen below. Please enter your cloud tenant ID to get started.

    Oracle cloud login

  2. Once you are able to login successfully, navigate to Networking > Virtual cloud instance. This step is required to create a virtual network. In this step we’re assuming that you’re setting up a new virtual network. You can also use an existing virtual network if you have it already. If not, then provide a suitable name to your network. There are two options available

    • Create a virtual network only – by default this doesn’t allow access to the internet. In this example we’re picking this option. Essentially, this is a LAN environment.
    • Create virtual cloud network plus related resources – this option allows access to Internet by default and you need create ACL’s to allow/block traffic

    Virtual cloud instance1

    Virtual cloud instance2

  3. In the next step create a subnet where your SD-WAN appliance will be hosted. Again, if you’re using an existing virtual network which has a subnet available, you can use that as well.

    Create subnet

    Create subnet1

  4. In the step above we’re creating a subnet and allowing public IP addresses for instance in this subnet. A public IP is mandatory since the SD-WAN appliance would must form virtual paths with an SD-WAN branch appliance or an MCN.

    Allow public IP

  5. SD-WAN Image Availability: Using OCI Object Storage, upload SD-WAN image into the dedicated Object Storage Bucket. You find the SD-WAN image on under the release version 11.0.2. You need to use the KVM image, that is, Once you find that, create an Object storage bucket by navigating to Object storage > Object storage and assign a name to it.

    Image availibilty

    Create bucket

  6. You can either choose a standard bucket or an archive bucket. Keep in mind that once you pick a tier, you’d not be able to change it. Also, you can encrypt this bucket using Oracle managed keys or via your own keys.

    Choose bucket

  7. In the next step create a custom image by importing your qcow image in Object Storage and assign a name to it. You can do this by navigating to Compute > custom images.

    Custom images

  8. Click import image to import the image to object storage and wait until the image is uploaded. Once uploaded, assign a name to the image. This’ll now form the base of SD-WAN images, you can use the same image for creating multiple SD-WAN instances.

    Import image

    Import image detail

    Imported image

  9. Now we must create a VM instance based on the custom image. For that navigate to Compute > Instances and click Create Instance.

    Instances in citrixcomp

    Create computer instance

  10. Pick the custom image that we had created in previous steps, in this case sdwan-pv.

    Custom image

    Change VM shape to a proper size and number of VNICs (in this example, we used VM.Standard2.4): You can use other VM’s as well as the VM has at least three VNIC’s.

    Browse all shape

  11. After picking the VM size, pick the virtual network within which you’d want to provision the instance. In this case the virtual cloud network is called dconoci.

    Config networking

    Sdwan oci

    Sdwan oci1

    Once you create an instance, you can log into SD-WAN administration GUI by management public IP address:

    Admin gui

  12. Once you log in, you find only one network adapter available:

    Network adopter

  13. Navigate back to the OCI portal, on your VM instance, create VNICs as the SD-WAN instance needs at least 3 network adapters/NIC’s to function. Create two more NIC’s and attach them to the VM.

    Oci portal


    Vnic info

  14. Once all additional VNICs are created, you can view them from OCI portal:

    View vnic

  15. When you log in SD-WAN administrative GUI, after rebooting the VM, you will see all additional VNICs shown in Network Adapters:

    Additional vnic

    Network adopter detail

  16. SD-WAN MCN and Client Configurations: Follow the standard SD-WAN configuration steps, you are able to create a virtual path between two SD-WAN instances:

    Mcn client config


  • From 10.2.6 and 11.0.3 release onwards, it is mandatory to change the default admin user account password while provisioning any SD-WAN appliance or deploying a new SD-WAN SE VPX. This change is enforced using both CLI and UI.

  • A system maintenance account - CBVWSSH, exists for development and debugging and has no external login permissions. The account can only be accessed through a regular administrative user’s CLI session.

Citrix SD-WAN on Oracle Cloud Infrastructure (Technical preview)