I am testing this for a Subdomain, they don't have root privileges. A regular user like in Azure, want to have aVPN site to SIte to corporate, with dual router using private ebgp
I tried using VNF and attempted to remove the in theory Optional virtual router from a VPC, I also tested with Isolated networks - Is not possible. Unless there are specific settings you can kindly share that I need to try. The VPC with dynamic routing, forces everything to Dynamic routing, the user has no access to the Vrouter, and not possible to manage the BGP nr the ASNs - as was stated on a previous question only admin with ROOT privileges have access to vrouter. Not even on projects are visible. Tata Y. > On Jul 31, 2025, at 1:48 AM, Kiran Chavala <kiran.chav...@shapeblue.com> > wrote: > > > > Hi Tata y > > Did you try the dynamic routing feature in Cloudstack for your Use case > > > https://docs.cloudstack.apache.org/en/4.20.1.0/adminguide/networking_and_traffic.html#dynamic-and-static-routing > > https://www.youtube.com/watch?v=eiK44dNliDE&pp=ygUbZHluYW1pYyByb3V0aW5nIGNsb3Vkc3RhY2sg > > Rgards > Kiran > > > > > > From: Chi vediamo <tatay...@gmail.com> > Date: Thursday, 31 July 2025 at 6:35 AM > To: users@cloudstack.apache.org <users@cloudstack.apache.org> > Cc: weiz...@apache.org <weiz...@apache.org>, d...@apache.org > <d...@apache.org>, gopalpanda...@gmail.com <gopalpanda...@gmail.com> > Subject: VPN SIte SITE on CS 4.20.1 Using BGP for the Site to Site VPN only > Hello team > > Is there a Way to configure a Site to site IPsec VPN to from a dual virtual > routers with antiafinity to two remote routers using eBGP using virtual > router? > > If yes what are the steps. > > > I Understand I can do it using the VNF. But the VNF is forced to stay Behind > the Virtual router for a VPC or an ISOLATED network. And that is an > additional hop that i do not want - Originally I ask how can i Use VFN on > isolated or VPC without a Virtual-router as the video from Wei suggested is > optional https://www.youtube.com/watch?v=rzAEbyi8SbM - the answe was is not > possible. > > Tata Y.
