Solutions Tech Lab

In this technote, we’ll build on the previous setup (Port Based Tunnelling with CX switches) by demonstrating:

• Micro segmentation between devices that are in the same subnets. We’ll achieve this by using role-based policies.
• Failover test of the tunnels since we have a cluster of controllers.

The main benefits of Microsegmentation comes from the fact that

• The attack surface is reduced
• Security breach containment is improved
• Makes granular access policy scalable and much easier to operate.

We assume that the previous setup is in place and note that the word “gateway”, “vpnc” and “controller” is used interchangeably here and hope you’ll find this short technote useful and as always please send through your feedback for improvement.