Citrix SD-WAN Orchestrator service is a cloud-hosted, it provides a single-pane of glass management platform for Citrix partners to manage multiple customers centrally, with suitable role based access controls.

The goal of this article is to isolate the issue when an SD-WAN instance can not stablish a connection with SDWAN Orchestrator. (Citrix Cloud solution)

1. Please validate the Citrix SD-WAN Orchestrator prerequisites

• Appliances: A minimum of two appliances (Standard Edition - Physical or Virtual) is required. For information on provisioning a new SDWAN VPX instance, see Citrix SD-WAN VPX.

  Each SD-WAN appliance or virtual instance must have an IP address configured statically or via DHCP and must include DNS entry to resolve the Fully Qualified Domain Name (FQDN) to Citrix Cloud Services.

• Internet Connectivity: Each of the branch and DC sites must have Internet connectivity to access Citrix SD-WAN Orchestrator service.

• Appliances need access to the following mentioned domain names. Citrix recommends whitelisting *.citrixnetworkapi.net:443. Here is a list of individual cloud service URLs that have to be whitelisted on the appliance firewall for zero-touch deployment:

  • Global endpoints:

    • sdwan-home.citrixnetworkapi.net:443
    • sdwanzt.citrixnetworkapi.net:443
    • sdwan-applmgr.citrixnetworkapi.net:443
    • download.citrixnetworkapi.net:443

  • Region specific endpoints [where region is us1, eu1, ap1, or ap2]

    • download-region.citrixnetworkapi.net:443
    • sdwan-applmgr-region.citrixnetworkapi.net:443
    • sdwan-logging-region.citrixnetworkapi.net:443
    • sdwan-statistics-collector-region.citrixnetworkapi.net:443
    • sdwan-saasgw-region.citrixnetworkapi.net:443
    • sdwan-policy-region.citrixnetworkapi.net:443
• The SD-WAN Appliance's management interface needs to get access to internet to stablish a connection with Citrx Orchestrator. Or the customer can configure an In-band and backup management interface. ( Please refer to https://docs.netscaler.com/en-us/citrix-sd-wan/current-release/inband-and-backup-management.html#:~:text=Citrix%20SD-WAN%20allows%20you%20to%20manage%20the%20SD-WAN,to%20use%20the%20SD-WAN%20data%20ports%20for%20management.)
• Please check the DNS server that is configured in the SD-WAN Appliance.
• Citrix SD-WAN software version 10.1.1 is the minimum appliance software supported on Citrix SD-WAN Orchestrator service.

To test the connection between the SD-WAN appliance and Citrix Orchestrator please follow these steps:

1. Log into the SDWAN Appliance thru CLI
2. Run the following commands: 
   1. ztd_diagnostic runFul
   2. view_events
   3. sdwan_ztd_agent.log
3. Please read the log output carefully to confirm the reason why the appliance can not stablish a connection with Citrix Orchestrator.
4. If you need additional assistance please create a SDWAN support bundle.

Title*