System and method for managing site-to-site VPNs of a cloud managed network

A non-transitory computer readable medium storing instructions to configure a first router for participation in a virtual private network, the instructions which when executed cause a system to perform operations comprising:

• determining whether the first router is already associated with a virtual local area network (VLAN) based on whether VLAN or subnet settings (“VLAN/subnet settings”) of the first router are received from an administrator;
• in response to determining that the first router is not already associated with the VLAN, generating default settings for an untagged VLAN, wherein the default settings include a chosen subnet from the untagged VLAN;
• and
• generating configuration information for the first router, wherein the configuration information includes a list of VPN peers, tunnel keys for each VPN peer pair, and a VPN peer subnet route table, the VPN peer subnet route table including the chosen subnet for the untagged VLAN;
• wherein the VPN peer subnet route table identifies a plurality of subnets participating in the VPN and a particular router associated with each of the plurality of subnets.

A system for configure a first router for participation in a virtual private network, the system comprising:

• a processor;
• a non-transitory computer readable memory storing instructions which when executed by the processor cause a system to perform operations comprising:
• determining whether the first router is already associated with a virtual local area network (VLAN) based on whether VLAN or subnet settings (“VLAN/subnet settings”) of the first router are received from an administrator;
• in response to determining that the first router is not already associated with the VLAN, generating default settings for an untagged VLAN, wherein the default settings include a chosen subnet from the untagged VLAN;
• and
• generating configuration information for the first router, wherein the configuration information includes a list of VPN peers, tunnel keys for each VPN peer pair, and a VPN peer subnet route table, the VPN peer subnet route table including the chosen subnet for the untagged VLAN;
• wherein the VPN peer subnet route table identifies a plurality of subnets participating in the VPN and a particular router associated with each of the plurality of subnets.