VPN Site-to-Site Tunnel Setup & Connectivity (z40 to Cloud vGR)

Objective

Verify that the z40 Gateway Router establishes stable VPN tunnels to the cloud-hosted vGR concentrator and correctly routes WAN traffic through these tunnels, as monitored via the zWAN Director.

Prerequisites

• Single z40 device provisioned, connected to the internet, and onboarded to the cloud-hosted zWAN Director.
• Cloud-hosted vGR concentrator configured and active within the same tenant on the Director.
• Admin access to zWAN Director UI.
• Windows test client(s) connected to the z40 LAN subnet (wired LAN00 or Wi-Fi LAN05).

Test Steps

1. Login to zWAN Director UI

• Access the Director UI via web browser with valid admin credentials.

2. Navigate to Tunnels Page

• Use the sidebar to navigate:
  Edge Controllers > [Select your z40 device] > Network > Tunnels.
• The page displays all configured tunnels with statuses.

3. Verify Tunnel Status

• Confirm each tunnel shows status “ESTABLISHED” with a green indicator.
• Review tunnel details: Local IP, Remote IP, Subnet, MTU, Tunnel ID.

4. View Tunnel Traffic Statistics

• Click the Statistics icon (bar chart icon) for the tunnel you want to monitor.
• This redirects to the Analytics > Statistics page, filtered for the selected tunnel.

5. Analyze Traffic Statistics

• On the Interfaces tab, observe:
  • Transmitted and Received Data Transfer Rates (bytes/sec).
  • Transmitted and Received Packets per second.
  • Transmitted and Received Errors.
  • Total data and packet counts.
• Confirm that traffic counters increase appropriately when generating WAN traffic from LAN clients.

6. Review Logs and Events

• Navigate to the Logs and Events tab under Analytics > Statistics.
• Review logs for tunnel-related events such as faults, recoveries, or status changes.
• Confirm no frequent tunnel down or error events.

7. Generate WAN Traffic from LAN Client

• From a Windows client on the z40 LAN (wired or Wi-Fi), generate traffic destined for WAN/cloud resources (e.g., ping external IP, access cloud app).
• Observe corresponding increases in traffic statistics for the tunnel interface.

8. (Optional) Test WAN Failover

• Disconnect primary WAN link (if multi-WAN configured).
• Confirm tunnels remain established via secondary WAN links (if applicable).
• Validate continued traffic flow through tunnels.

Validation Criteria

• VPN tunnels display stable ESTABLISHED status with green indicators.
• Traffic statistics reflect active traffic through tunnels when WAN-bound traffic is generated.
• Logs show no recurring tunnel faults or disruptions during testing.
• Tunnels automatically recover from transient WAN failures without manual intervention.
• LAN traffic remains local and unaffected by tunnel tests.

Notes

• Tunnels are pre-configured and automatically established for POC customers; no manual tunnel setup required.
• Use Director’s tunnel monitoring and logs for health and troubleshooting.
• Ensure Windows Firewall or endpoint protections do not block test traffic.