Service Gateway – Service Provider (SG-SP)

Purpose and Functionality #

The multi-tenant Service Gateway Service Provider (SG-SP) serves as bridge between the customer’s network and the cloud service, providing seamless integration and secure communication. Deployed within the service provider’s infrastructure as a centralized cluster, any Cisco router running IOS-XE can act as Service Gateway. It supports multi-tenant environments (VRF’s), enabling service providers to deliver solutions to multiple customers efficiently.

For each customer, the service provider utilizes their IP-VPN backbone to extend the cloud service to one or multiple sites within the customer’s IP-VPN network. The SG-SP is positioned within the network traffic flow, integrating smoothly with existing LAN and WLAN infrastructures from any vendor, ensuring flexibility and compatibility across diverse setups.

Deployment Models #

1. Service Provider Customers:
   • The SG-SP is deployed in a centralized cluster within the service provider’s infrastructure.
   • Designed to support multi-tenant capabilities, enabling scalability and efficient resource allocation.
   • Service providers use their IP-VPN networks or SD-WAN services to connect customer networks to their designated instances in the SG-SP cluster.

Security and Redundancy #

• Encrypted Communication:
  Communication between the cloud service and the SG-SP is secured via an encrypted FlexVPN tunnel.
• Redundancy Options:
  Supports hot standby for failover and load balancing to optimize performance.

Key Features #

1. Policy-Based Routing:
   • Ensures efficient traffic management based on predefined policies.
2. Dynamic Segmentation:
   • Utilizes SGT/SXP tunnels and SGT-to-IP mapping for secure and dynamic segmentation of network traffic.
3. Logical Independence:
   • Each SG-SP instance operates within an isolated framework using VRF (Virtual Routing and Forwarding) to ensure logical and operational separation.

Scalability and Flexibility #

• Service Provider Deployments:
  Multi-tenant capabilities ensure scalability, and centralized management optimizes resource utilization for service providers.

ServiceGateway Router Support Matrix #

The table below lists the Cisco router series that are verified and fully compatible with the SignIn ServiceGateway integration. The specified license levels are required to enable the features utilized by the integration.

Note #

• Require Cisco IOS XE 17.3.8a or later.