Master Engine and Virtual Engine configuration overview
Master Engine and Virtual Engine configuration consists of creating Master Engines and associating Virtual Engines with the Master Engines.
By default, a Master Engine element has placeholders for two nodes when the element is created. A Master Engine can have 1–16 nodes. If you do not need to use clustering on the Master Engine, you can remove one of the automatically created nodes.
Note: All Virtual Engines on the same Master Engine must have the same Virtual Engine role (Engine/SD-WAN, IPS, or Layer 2 Engine). To use more than one Virtual
Secure SD-WAN Engine role, you must create a separate Master Engine for each Virtual Engine role.
Each Master Engine must be on a separate physical Master Engine appliance.
The configuration consists of the following general steps:
- Generate and install Secure SD-WAN Engine licenses for the Master Engine.
- Create a Master Engine element.
- Create a Virtual Resource element.
- Configure Physical or VLAN Interfaces for the Master Engine and assign Virtual Resources to the interfaces.
- Create Virtual Engine elements.
- Configure Physical, VLAN, or Tunnel Interfaces for the Virtual Engines.
- Configure routing for the Master Engine and for Virtual Engines. Note: You cannot configure routing for Virtual IPS engines or Virtual Layer 2 Engines.
- Install or refresh the policy on the Master Engine to transfer changes to the Master Engine’s Physical/VLAN Interfaces and the mapping of Virtual Engines to Master Engine Interfaces.
- Install or refresh the policy on the Virtual Engines.