User interface of the solution

Kaspersky SD-WAN is managed using the orchestrator web interface. You can use the menu sections to configure the components of the solution. When you navigate to a section, an additional menu with subsections is displayed in a collapsed form. To expand the menu, hover your mouse cursor over the icon of one of the subsections. You can click the expand icon Expanding the navigation pane to disable the automatic minimization of the menu.

Two variants of the orchestrator web interface are supported:

The administrator portal gives administrators full access to managing the solution components.
The self-service portal gives tenants access to managing the SD-WAN instances that are deployed for them.

Administrators can log in to the self-service portal of a tenant.

Administrator portal

Main menu of the administrator portal

Dashboard	Information about the current status of solution components such as CPE devices and network functions.
Infrastructure	Corporate infrastructure. In this section, you can configure the following components: Domains Data centers Management subnets Controllers VIM
Catalog	Network service templates for centralized configuration of network services
SD-WAN	CPE — CPE devices for relaying traffic. CPE templates — CPE templates for centralized configuration of CPE devices. Firewall templates — firewall templates for centralized configuration of the firewall on CPE devices. Firewall zones — firewall zones for network interfaces and subnets of CPE devices. NetFlow templates — NetFlow templates for monitoring traffic packet information on CPE devices. IPAM — IP address and subnet ranges for CPE devices. Firmware — CPE device firmware. Certificates — certificates of CPE devices. SD-WAN instances — deployed SD-WAN instances. SD-WAN instance templates — SD-WAN instance templates for centralized configuration and deployment of SD-WAN instances. SD-WAN instance pools — SD-WAN instance pools. UNI templates — UNI templates for centralized creation of UNIs on CPE devices.
Scheduler	Scheduled tasks.
Monitoring	Zabbix server settings for monitoring solution components.
Notification	Settings for sending email notifications to users.
Logs	Logs of solution components, such as CPE devices, virtual network functions, and physical network functions.
Tenants	Tenants of the solution.
Users	Users of the solution. In this section, you can configure the following components: Users Access permissions LDAP user groups LDAP connections
Confirmation	Confirmation requests for user actions.

The controller has a separate configuration menu.

Controller configuration menu

Controller configuration menu on the administrator portal

Controller nodes	Information about the current status of controller nodes.
Switches	Advanced settings of CPE devices and switches.
Topology	Graphical topology of an SD-WAN instance.
Topology tags	Topology tags for building links between CPE devices.
Segments	Segments formed from CPE devices and switches.
QoS	Quality of service settings. In this section, you can configure the following components: Traffic classes Traffic classifiers Quality of service rules
P2P services	Point-to-Point transport services.
P2M services	Point-to-Multipoint transport services.
M2M services	Multipoint-to-Multipoint transport services.
IP multicast services	IP multicast transport services.
L3 VPN services	L3 VPN transport services.
TAP services	TAP (Test Access Point) services for traffic mirroring.
Service interfaces	Service interfaces of CPE devices and switches.
Constraints	Manual-TE constraints and threshold constraints for assuring quality of service.
Traffic filters	Traffic filters for enforcing quality of service.
OpenFlow groups	OpenFlow port groups.
Tunnels	Links between CPE devices and switches, and links between CPE devices.
Logs	Docker container log verbosity level.
SNMP	Settings for monitoring CPE devices, virtual network functions, and physical network functions using SNMP.

Self-service portal

Main menu of the self-service portal

Dashboard	Information about the current status of solution components such as CPE devices and network functions.
Infrastructure	Corporate infrastructure. In this section, you can configure controllers.
Catalog	Network services for traffic transmission and virtualization of network functions.
SD-WAN	CPE — CPE devices for relaying traffic. CPE templates — CPE templates for centralized configuration of CPE devices. Firewall templates — firewall templates for centralized configuration of the firewall on CPE devices. Firewall zones — firewall zones for network interfaces and subnets of CPE devices. NetFlow templates — NetFlow templates for monitoring traffic packet information on CPE devices. IPAM — IP address and subnet ranges for CPE devices. UNI templates — UNI templates for centralized creation of UNIs on CPE devices.
Scheduler	Scheduled tasks.
Notification	Settings for sending email notifications to users.
Logs	Logs of solution components, such as CPE devices, virtual network functions, and physical network functions.
Confirmation	Confirmation requests for user actions.

The controller has a separate configuration menu.

Controller configuration menu on the self-service portal

P2P services	Point-to-Point transport services.
P2M services	Point-to-Multipoint transport services.
M2M services	Multipoint-to-Multipoint transport services.
IP multicast services	IP multicast transport services.
L3 VPN services	L3 VPN transport services.
TAP services	TAP services for traffic mirroring.
Service interfaces	Service interfaces of CPE devices and switches.
Constraints	Manual-TE constraints and threshold constraints for assuring quality of service.
Traffic filters	Traffic filters for enforcing quality of service.
OpenFlow groups	OpenFlow port groups.

In this Help section

Setting and resetting the default page

Switching between light and dark modes of the orchestrator web interface

Changing the language of the orchestrator web interface

Managing solution component tables

Page top