RBNetEngr's Posts

https://docs.vmware.com/en/VMware-SD-WAN/5.2/VMware-SD-WAN-Administration-Guide/GUID-AA2A434D-A249-4CE0-9092-BA756B823099.html?hWord=N4IghgNiBcIG4CcEAcQF8g The link above describes how to set up VRRP, as well as some of the conditions for it to work. But for the description of problem you describe, it sounds like an issue with ARP, and that the switch is not able to get the correct MAC address for the VRRP VIP, so it will not be able to ping it.  Did you check the ARP table to see what the value of the MAC address associated with the VRRP VIP is? Also, have you verified that VRRP is operating between the VCE and the AVPN router?

There doesn't seem to be much information available from VCO to provide DHCP information.  I am not versed in using APIs, but you may to check and see if there is some additional information you can pull from VCO using APIs, or even that List Client info, without needing to log into VCO, navigate to Test & Troubleshooting, run the List Client task, and wait for output. You would probably be better off setting up your own DHCP server (there are plenty of free options out there using Linux), and configure the Edge 610s for DHCP Relay. Regarding MAC address filtering...if you look at the Firewall options in the Velo Edge, you can define ACLs using MAC address as the identifying criteria, and then Allow or Deny.  That should work for you.  I just tested it, adding the MAC address of a computer that can connect to the Velo Edge, and setting the option to Deny, and it cannot connect to the network.