Topologies
About Topologies
This chapter introduces the common deployment topologies supported by SD-WAN Edge and explains how they are used to connect users, applications, cloud services, and enterprise resources across distributed environments.
The SD-WAN Edge is the on-premises component of the SD-WAN solution. Deployed at customer sites such as branch offices, headquarters, and data centers, it provides connectivity between local networks, wide area networks, Internet services, and private networks. Depending on the hardware platform and software licenses, it can support a wide range of connectivity models, security functions, VPN services, and high-availability mechanisms.
Depending on the deployment requirements, the SD-WAN Edge can provide services such as:
WAN connectivity via Ethernet, fiber, xDSL, and 4G/5G
LAN connectivity for users, servers, and local devices
Internet access and cloud connectivity
Site-to-site VPN connectivity
Traffic steering and path selection across multiple WAN links
Network services such as DHCP and DNS proxy
Rather than focusing on individual networking features in isolation, this chapter presents representative deployment topologies that demonstrate how these capabilities can be combined to address real-world connectivity requirements. Each topology illustrates a common architectural pattern and highlights how traffic can be securely transported between sites, cloud applications, Internet destinations, and private enterprise resources.
The examples presented in this chapter are intended as reference architectures rather than exhaustive deployment guides. Their purpose is to help you map business and technical requirements to an appropriate topology and understand the design choices available when deploying the SD-WAN solution.
In this chapter, you will learn about the most common deployment topologies supported by the SD-WAN solution and the networking requirements they address:
LAN Connectivity connects local users, devices, and servers.
WAN Connectivity provides access to service provider networks.
Direct Internet access provides direct connectivity to Internet resources.
Secure Cloud Internet provides secure access to Internet and cloud services.
VPN Private Network securely connects sites across a shared infrastructure.
Multi-Overlay Traffic Rules steer applications across different overlays based on business requirements.
Multi-WAN Dynamic Connectivity optimizes the use of multiple WAN links based on network conditions and policies.
Multi-LAN segmentation with services enables traffic separation and local network services.
Edge Redundancy improves service availability through resilient Edge deployments.
Routing Extension integrates the SD-WAN solution into an existing routing environment.
The following is a non-exhaustive list of Ekinops router platforms that can be used as an SD-WAN Edge:
SASE Box SB600 / SB2500 / SB3500
One421 / One521 / One531
One621 / One641
One2501 / One2520 / One2540 / One2560 / One2561
One3540
One5G
1647
Selecting an Edge Platform
The choice of router platform depends on the site's connectivity and performance requirements.
Factors such as WAN technologies, interface density, throughput, VPN scale, and high-availability requirements should be considered when selecting a SD-WAN Edge for a specific deployment.
By the end of this chapter, you will understand the main topology options supported by the SD-WAN Edge, the networking components involved in each design, and how to select the architecture that best aligns with your connectivity, security, and availability requirements.