This topic describes how to create and configure a Megaport Virtual Edge (MVE) with Arista VeloCloud SD-WAN. Once you have a Megaport account, you use the Arista centralized management console called Orchestrator. In Orchestrator you create and configure the profile and edge device. In the Megaport Portal, you create, administer, maintain, monitor, and terminate MVE.
Before you begin, you need to create a Megaport account:
Licensing
Before you create an MVE in the Megaport Portal, you need a valid license from Arista VeloCloud. For more information about obtaining an Arista VeloCloud license, see Edge Licensing or ask your Arista VeloCloud Sales Associate or Reseller.
Basic steps
This section provides an overview of the configuration steps in Orchestrator and the Megaport Portal.
The basic steps are:
- Create an Arista VeloCloud SD-WAN edge device profile and edge device in Orchestrator.
- Configure the Arista VeloCloud SD-WAN device and apply the profile to the device.
- Generate an SSH public key.
- Create an MVE instance in the Megaport Portal.
Creating an Arista VeloCloud SD-WAN Virtual Edge profile and device
To get started, you create a default profile so that when the edge device registers to Orchestrator, it retrieves its base configuration, connects to Orchestrator, and enables some specific firewall rules. After that you can manage the MVE device through Orchestrator.
To create an edge profile in Orchestrator
-
Log in to Orchestrator.
-
Click the link for the Customer profile account.
-
Choose Configure > Profiles.
-
Click New Profile.
-
Enter a Profile Name and an optional Description.
For example, megaport-default-profile.
-
Click Create.
To create a virtual edge device in Orchestrator
-
Select the Device tab.
-
Select Global Segment from the Configure Segment drop-down.
-
Enable Cloud VPN.
-
Unselect all device types, except for Virtual Edge.
-
Under Device Settings: Virtual Edge, click Edit next to GE1 and GE2 and disable those interfaces sequentially.
-
Ensure that GE3 is enabled.
GE3 becomes the first available routed interface. Other ports do not require to be disabled and can be left in their current state.
-
Configure the following options for the GE3 interface:
- Interface Enabled — Select this option.
- Capability — Choose Routed from the drop-down list.
- Addressing Type — Choose DHCP from the drop-down list.
- WAN Overlay — Enable this option and choose Auto-Detect Overlay from the drop-down list.
- All other interfaces — Leave the default values.
-
Click Update GE3.
-
Under Wi-Fi Radio, ensure that Radio Enabled is unselected (there are no wireless interfaces).
-
Click Save Changes in the upper-right corner.
-
Select the Firewall tab and enter comma-separated IP values for any customer-side management IPs that require access to the edge device.
-
Ensure that the Firewall Status option is set to On.
-
Next to Support Access, enter the trusted IP addresses that are allowed access to the device.
-
Next to SNMP Access, you can optionally allow SNMP access to the WAN public interface. Enter the trusted IP addresses to allow.
-
Next to Local Web UI Access, enter the trusted IP addresses to allow access to the WAN interface. This is important because you are configuring a Arista VeloCloud Virtual Edge device with no LAN ports and no console.
-
Accept 80 as the Local Web UI Port Number or change it to match your environment.
-
Click Save Changes in the upper-right corner.
The next step is to configure and assign the profile to the edge device.
Configuring the Arista VeloCloud edge device
After creating the profile, you will configure the edge device to get it connected to the internet.
To configure a Arista VeloCloud edge device in Orchestrator
-
In Orchestrator, click the link for the Customer profile account.
-
Choose Configure > Edges.
-
In the upper-right corner, click New Edge….
-
Populate the fields as required for your network.
- Name — Enter a name for the edge device.
- Model — Choose Virtual Edge from the drop-down list.
- Profile — Select the recently created profile to assign to the new edge device.
- Authentication — Choose an authentication option for the edge device.
For more information about the authentication options, see the Arista VeloCloud SD-WAN documentation.
- Edge License — Choose the license to apply to this edge device. The list displays the licenses assigned to your enterprise. Licenses are grouped by the edge device throughput limit (1 Gbps or 10 Gbps), region, and length of contract. For more information about obtaining a VeloCloud license, see Edge Licensing or ask your Arista VeloCloud Sales Associate or Reseller.
- Custom Info (optional) — Enter a description for the edge device.
- Contact Name and Contact Email — Enter a contact name and email address for this device.
-
Click Create.
-
The Edge Overview tab lists an activation key. Save the activation key for use in the Megaport Portal.
-
Make any device-specific changes to the Device, Business Policy, or Firewall parameters. Or, use a device-specific profile to use predefined profile settings.
-
Click Save Changes in the upper-right corner.
The next step is to generate an SSH key for authentication.
Administrative access to MVE
You connect your MVE through a public/private SSH key pair to establish a secure connection. The public SSH key allows you to use SSH to access the MVE and perform administrative tasks, such as setting the administrative password, enabling HTTPS access, and optionally registering the MVE to your management platform.
Megaport supports the 2048-bit RSA key type.
To generate an SSH key pair (Linux/Mac OSX)
-
Enter the SSH keygen command in the terminal.
The key generator command creates an SSH key pair and adds two files to your ~/.ssh directory:
- megaport-mve-instance-1-2048 - contains the private key.
- megaport-mve-instance-1-2048.pub - contains the public key that is authorized to log in to the vendor account.
To generate an SSH key pair (Windows, using PuTTYgen)
- Open PuTTYgen.
- In the Key section, choose RSA 2048 bit and click Generate.
- Move your mouse randomly in the small screen to generate the key pairs.
- Enter a key comment to identify the key.
This is convenient when you use several SSH keys.
- Enter a Key passphrase, and re-enter to confirm.
The passphrase is used to protect your key. You will be asked for it when you connect via SSH.
- Click Save private key, choose a location, and click Save.
- Click Save public key, choose a location, and click Save.
You will copy and paste the contents of the public key file in the Megaport Portal later to distribute the public key to the MVE. Your private key will match the public key to grant access. Only a single private key has access to the MVE for SSH access.
Creating an MVE in the Megaport Portal
When creating an MVE, select a location that supports the MVE and is in a compatible metro area for your network design. You can connect multiple locations to an individual MVE. For more information about location details, see Planning Your Deployment.
You can deploy multiple MVEs within the same metropolitan area for redundancy or capacity reasons. As part of the MVE creation process, you will also typically create a Megaport Internet connection.
To create an MVE
-
In the , go to the Services page.
-
Click Add Service, then select Virtual Edge (MVE).
The Create Virtual Edge page opens. Complete the sections on this page to configure your MVE. The order summary updates as you make selections. On wider screens, the summary is displayed in a panel on the right. On narrower screens, it is displayed in a bar at the bottom of the page that you can expand.
-
In the Details section, specify these fields:
-
MVE Name — Specify a name that helps you identify the MVE, particularly if you plan to have more than one MVE. This name appears in the Megaport Portal.
-
Service Level Reference (optional) — Specify a unique identifying number for your Megaport service to be used for billing purposes, such as a cost center number, unique customer ID, or purchase order number. The service level reference number appears for each service under the Product section of the invoice. You can also edit this field for an existing service.
-
Project (optional) — Select a project to add the MVE to, or leave the default (No Project).
You can type in the field to search by project name. The selected project appears in the order summary, and the MVE is added to it when provisioned.
To create a project without leaving the page, select New Project at the bottom of the list, then specify a project name and description. The new project is automatically selected for the order.
You need permission to manage projects to create a project. Without this permission, the New Project option does not appear, but you can still select an existing project.
-
In the Select Vendor / Product section, select Arista VeloCloud, then select the software version.
To find the product, browse the category tabs or use the Search vendors field. The locations, sizes, and configuration fields available on the rest of the page depend on the product you select.
-
In the Location section, specify these fields:
-
Location — Select your preferred location. Use the Search field to find a location by metro or country name. Alternatively, browse the region tabs, then select a location.
Only locations where the selected product is available are listed. Select a location geographically close to your target branch or on-premises locations.
The country you choose must be a market in which you have already registered. If you have not registered a billing market in the location where you will deploy the MVE, follow the procedure in Enabling Billing Markets.
-
Mode — Select Auto to have Megaport automatically choose a provider and data center at the selected location. Select Manual to choose the provider and data center yourself.
-
Diversity Zone — Select Red or Blue, or select Auto to have Megaport select the zone for you. The selected diversity zone appears in the order summary. For more information, see MVE Diversity.
-
If you selected Manual mode, select a data center provider in the Provider section, then select a data center from the drop-down list in the Data Center section.
Only providers and data centers available at your selected location are listed.
-
In the MVE Size section, select a size.
Each size shows its vCPU and RAM allocation. For example, Small (MVE 2/8) has 2 vCPUs and 8 GB of RAM. Only sizes supported by the selected product are listed, and sizes that are not available at the selected location are grayed out and labeled Not available here. The sizes support varying numbers of concurrent connections, and individual partner product metrics vary slightly.
If the MVE size you want is not available, there is not enough capacity at the selected location. You can either select another location with enough capacity or contact your Account Manager to discuss requirements.
-
In the Vendor Configuration section, specify the Arista VeloCloud SD-WAN-specific settings:
-
Orchestrator Address — Specify an FQDN (Fully Qualified Domain Name) or IPv4 or IPv6 address for the Orchestrator where you created the edge device.
-
Activation Code — Specify the activation key provided to you by Orchestrator after creating the edge device.
-
SSH Key — Copy and paste the contents of your public SSH key here. You can find the public key in the megaport-mve-instance-1-2048.pub file generated earlier.
-
Virtual Interfaces (vNICs) — Each MVE is configured with one vNIC named Data Plane by default. To change a name, type over the name text in the box. You can also change the vNIC name later, after the MVE has been deployed. You cannot remove a default vNIC.
You can add a total of five vNICs to the MVE, including the one added by default. For more information, see Types of vNIC Connections.
To add a vNIC, click Add, then specify a name for the vNIC.
If you want to increase or decrease the number of vNICs on this MVE after it has been deployed, you must delete the entire MVE and recreate it. You cannot add or delete vNICs on a deployed MVE.
-
In the Pricing section, specify these fields:
-
Contract Term — Select a contract term: No Minimum Term, 12 Months, 24 Months, 36 Months, 48 Months, or 60 Months. Longer terms result in a lower monthly rate. The default is 12 Months.
-
Contract Renewal — Automatically renews the contract at the same price and term length when the current term ends. The initial setting comes from your company default. If you disable it, the contract rolls over to a month-to-month term at the end of the current term, without the term discount. Contract Renewal is not available when you select No Minimum Term.
For more information, see Managing Minimum Term Renewal and MVE Pricing and Contract Terms.
-
In the Resource Tags section, add any tags you want to apply to this MVE.
To add a tag, click Add New Tag, then specify these fields:
- Key — Specify a lowercase string with a maximum length of 128 characters. Valid characters are lowercase letters, numbers, and
- . _ : / \.
- Value — Specify a string with a maximum length of 256 characters. Valid characters are letters, numbers, spaces, and
- . _ : @ / + \.
Repeat for each tag. You can add up to 50 tags.
Never include sensitive information in a resource tag. Sensitive information includes commands that return existing tag definitions and information that identifies a person or company.
-
Review the order summary, then click Add MVE.
The newly created MVE is added to your cart under Configured Services, ready for checkout.
You are prompted to create a Megaport Internet connection. A Megaport Internet connection provides connectivity and allows MVE to register and communicate with Arista VeloCloud SD-WAN. The overlay network is created and maintained by Arista VeloCloud SD-WAN to provide secure tunnels from the branch locations.
To create the Megaport Internet connection
-
Click Create Megaport Internet to proceed (recommended), or click Not now to provision internet access at a later time.
MVE requires connectivity to the internet onto the management plane virtual interface. You can either provision a Megaport Internet connection or configure a third-party internet connection using a private VXC. We strongly recommend that you create a Megaport Internet connection for the initial MVE startup and deployment to ensure that the MVE is provisioned and functioning correctly.
-
Select the target Port (the internet router).
The B-End of a Megaport Internet connection can be anywhere that Megaport Internet is available.
You can use the Search field to find the Port name, Country, Metro City, or address of your destination Port. You can also filter by diversity zone.
-
Click Next.
-
Specify the connection details:
-
Connection Name — The name of your Megaport Internet connection to be shown in the .
-
Service Level Reference (optional) — Specify a unique identifying number for your Megaport service to be used for billing purposes, such as a cost center number, unique customer ID, or purchase order number. The service level reference number appears for each service under the Product section of the invoice. You can also edit this field for an existing service.
Use the same Service Level Reference numbers for the Megaport Internet connection and MVE to help identify the matching pair in your invoice.
-
Rate Limit — The speed of your connection in Mbps. The rate limit is configurable starting from 20 Mbps and can scale to several Gbps or more, in 1 Mbps increments. Available speed tiers might vary by location and service type. You can change the speed as required after you create the Megaport Internet connection. Monthly billing details appear based on location and rate limit.
-
VXC State — Select Enabled or Shut Down to define the initial state of the connection. For more information, see Shutting Down a VXC for Failover Testing.
If you select Shut Down, traffic will not flow through this service and it will behave as if it was down on the Megaport network. Billing for this service will remain active and you will still be charged for this connection.
-
A-End vNIC — Select vNIC-0 for initial management access.
-
Preferred A-End VLAN (optional) — Select Untagged to remove VLAN tagging and allow first-time administrative login to the device.
-
Minimum Term — Select No Minimum Term, 12 Months, 24 Months, 36 Months, 48 Months, or 60 Months. Longer terms result in a lower monthly rate. 12 Months is selected by default. Take note of the information on the screen to avoid early termination fees (ETF).
Select Automatically Renew at the same price at the end of Contract Term for services with a 12, 24, 36, 48 or 60-month term to automatically renew the contract at the same discounted price and term length at the end of the contract. If you don’t renew the contract, at the end of the term, the contract will automatically roll over to month-to-month contract for the following billing period, at the same price, without term discounts. For more information, see Managing Minimum Term Renewal.
For more information, see Megaport Internet Pricing and Contract Terms and VXC, Megaport Internet, and IX Billing.
-
Resource Tags — You can use resource tags to add your own reference metadata to a Megaport service.
To add a tag:
-
Click Add Tags.
-
Click Add New Tag.
-
Enter details into the fields:
- Key — String, maximum length 128 characters. Valid values are
a-z 0-9 _ : . / \ -
- Value — String, maximum length 256 characters. Valid values are
a-z A-Z 0-9 _ : . @ / + \ - and spaces
-
Click Save.
If you already have resource tags for that service, you can manage them by clicking Manage Tags.
Never include sensitive information in a resource tag. Sensitive information includes commands that return existing tag definitions and information that will identify a person or company.
-
Click Next to proceed to the connection detail summary.
-
Click Add VXC to move this configuration to your cart.
-
Click Review Order to proceed through the checkout process, or click Save to save the configured services before placing the order.
-
Review the Important Information section and confirm agreement with the Service Agreements.
If you do not have a promotion code, skip to the Order Now step. If you do have a promotion code, enter it into the Enter discount code field then click Apply. Alternatively, if a code already appears in the Discounts field, verify it is correct and click Apply.
The promotional discount appears below the Standard Term discount. This discount is not reflected in the Monthly Rate shown here, it is applied at the time of billing. If an invalid or expired code causes an error with your order, contact your Megaport Account Manager for a replacement code.
If you entered an incorrect promotion code, you can remove it by clicking Remove.
In addition to entering a promotion code manually, there are two other ways to apply promotion codes.
- Auto-apply — Megaport automatically applies the promotion code to your order. It appears automatically on the Checkout page.
- Manual list — Eligible promotion codes appear at checkout for any applicable services in your cart. You can then select and apply them.
-
Click Order Now.
Ordering MVE provisions the appliance and assigns IP addresses from the Megaport SDN. The MVE provisioning takes only a few minutes to complete. The provisioning process spins up a Arista VeloCloud SD-WAN.
Viewing the MVE in the Megaport Portal
After creating the MVE, you can view it in the Megaport Portal on the Services page. You can also view the public IP addresses assigned.
To view an MVE in the Megaport Portal
The Megaport Internet icon differs from a standard VXC icon in the Megaport Portal, as shown in the image.
For more information about the Services page, see Understanding the Services Page.
To view the public IP addresses assigned to the MVE
- On the Services page, click Details in the Actions section for the Megaport Internet connection.
The Connection Details page appears. From here, you can modify any of the Megaport Internet connection details.
- Select the Details tab.
- Locate the Assigned IPv4 Address and Assigned IPv6 Address fields.
These are the public IP addresses assigned to the MVE.
The Public IP Addresses (IPv4 or IPv6) are the addresses of the MVE device. By this time, the new MVE should be registered to your Orchestrator and ready for additional configuration.
Viewing the MVE in Orchestrator
After creating the MVE, you can monitor the status in Orchestrator.
To view an MVE in Orchestrator
-
Log in to Orchestrator.
-
Choose Monitor > Network Overview.
-
Click the MVE edge device from the list.
The Link Status and Bandwidth Usage metrics are displayed.
Validating your connection
- In Orchestrator under Test & Troubleshoot > Remote Diagnostics, select the MVE and click Run for Troubleshoot BGP - Show BGP Summary to verify the BGP session and ensure the edge device is up.
You can also check connectivity and BGP status from the CLI of the edge device. For more information, see Reviewing MVE Connection Settings in Arista VeloCloud SD-WAN.
Next steps
Once the MVE is provisioned with an Active status, the next step is to connect a VXC to a Cloud Service Provider (CSP), a local port, or a third-party network. You can optionally connect a physical Port to the MVE through a private VXC or connect to a service provider in the Megaport Marketplace.
For more information, see Creating a VXC. Last modified on October 12, 2026
