Kaspersky SD-WAN Help
About Kaspersky SD-WAN
- Distribution kit
- Hardware and software requirements
- Ensuring security
- What's new
Architecture of the solution
Deploying Kaspersky SD-WAN
- Redundancy of solution components
- About the installation archive
- About the attended, unattended, and partially attended action modes
- Preparing the administrator device
- Managing passwords
  - Manually generating passwords
  - Changing passwords
- Preparing the configuration file
- Replacing the graphics of the orchestrator web interface
- Replacement of a failed controller node
- Upgrading Kaspersky SD-WAN
- Removing Kaspersky SD-WAN
Logging in and out of the orchestrator web interface
Licensing of Kaspersky SD-WAN
- About the End User License Agreement
- About data provision
User interface of the solution
- Setting and resetting the default page
- Switching between light and dark modes of the orchestrator web interface
- Changing the language of the orchestrator web interface
- Managing solution component tables
Navigating to the orchestrator API
Managing the Kaspersky SD-WAN infrastructure
- Managing domains
- Managing data centers
- Managing management subnets
- Managing controllers
- Managing a VIM
Managing users and their access permissions
- Managing access permissions
- Managing LDAP connections
- Managing users
- Managing LDAP user groups
- Enabling or disabling two-factor authentication for all users
- Managing confirmation requests
- Limiting the duration of a user session
- Viewing and ending active user sessions
Multitenancy
- Scenario: Deploying an SD-WAN instance for a tenant
- Managing tenants
- Managing SD-WAN instance templates
- Working with SD-WAN instances
- Managing SD-WAN instance pools
Managing CPE devices
- About the interaction of the CPE device and the orchestrator
- About the interaction of the CPE device and the controller
- Default credentials of KESR CPE devices
- Scenario: Automatic registration (ZTP) of a CPE device
- Scenario: Deployment on the VMware virtualization platform and automatic registration (ZTP) of a vCPE device
- Scenario: Re-registering a CPE device
- Managing CPE templates
  - Creating a CPE template
  - Importing a CPE template
  - Cloning a CPE template
  - Exporting orchestrator and controller connection settings and SD-WAN interfaces from a CPE template
  - Exporting network interfaces from a CPE template
  - Viewing the usage of a CPE template
  - Deleting a CPE template
- Managing CPE devices
  - Adding a CPE device
  - Generating an URL with basic CPE device settings
  - Manually registering a CPE device
  - Unregistering a CPE device
  - Specifying the address of a CPE device
  - Enabling and disabling a CPE device
  - Restarting a CPE device
  - Shutting down a CPE device
  - Connecting to the CPE device console
  - Viewing the password of a CPE device
  - Exporting orchestrator and controller connection settings and SD-WAN interfaces from a CPE device
  - Exporting network interfaces from a CPE device
  - Changing the DPID of a CPE device
  - Deleting CPE devices
- Two-factor authentication of a CPE device
- Managing certificates
  - Uploading a certificate using the orchestrator web interface
  - Manually installing certificates on CPE devices
  - Scenario: installing certificates on a CPE device with firmware version 23.07
  - Exporting a certificate
  - Deleting certificates
- Automatically deleting and disabling CPE devices
- Grouping CPE devices using tags
  - Assigning a tag to CPE devices
  - Removing a CPE device tag
- Configuring logs on CPE devices
- Specifying NTP servers on CPE devices
- Managing modems
- Updating firmware
  - Manually updating firmware on a CPE device
  - Uploading firmware to the orchestrator web interface
  - Scheduling firmware updates on selected CPE devices
  - Scheduling firmware updates on CPE devices with specific tags
  - Restoring firmware of a KESR-M1 CPE device
  - Restoring firmware of a KESR-M2-5 CPE device
  - Correspondence of CPE device models with firmware versions
  - Deleting firmware
- Additional configuration of CPE devices using scripts
  - Adding a script to CPE devices
  - Manually running a script on CPE devices
  - Scheduling scripts on CPE devices
  - Editing a script on CPE devices
  - Deleting a script on CPE devices
- Managing network interfaces
  - Creating network interfaces
  - Editing a network interface
  - Disabling or enabling a network interface
  - Canceling the application of network interface settings to a CPE device
  - Deleting a network interface
- Configuring the connection of a CPE device to the orchestrator and controller
- Managing SD-WAN interfaces
  - About sending information about SD-WAN interfaces of the WAN type to the controller
  - Package fragmentation
  - Traffic queues on SD-WAN interfaces
  - Creating an SD-WAN interface of the WAN type
  - Editing an SD-WAN interface
  - Disabling or enabling an SD-WAN interface
  - Deleting an SD-WAN interface of the WAN type
- Managing service interfaces
  - Creating a service interface
  - Creating an ACL interface
  - Viewing the usage of a service interface and an ACL interface
  - Deleting a service interface and an ACL interface
- Managing OpenFlow port groups
  - Creating an OpenFlow port group
  - Editing an OpenFlow port group
  - Deleting an OpenFlow port group
- Configuring a UNI for connecting CPE devices to network services
  - Managing UNI templates
    - Creating a UNI template
    - Deleting a UNI template
  - Managing UNIs
- Adding a static route
- Filtering routes and traffic packets
  - Managing access control lists (ACLs)
  - Managing prefix lists
  - Managing route maps
- Route exchange over BGP
  - Basic BGP settings
  - Managing BGP peers
  - Managing BGP peer groups
- Route exchange over OSPF
  - Basic OSPF settings
  - Managing OSPF areas
  - Managing OSPF interfaces
- Using BFD to detect routing failures
  - Enabling or disabling the BFD protocol
  - Creating a BFD peer
  - Editing a BFD peer
  - Deleting a BFD peer
- Ensuring high availability with VRRP
  - Enabling or disabling the VRRP protocol
  - Managing VRRP instances
  - Managing VRRP instance groups
- Transmission of multicast traffic using PIM and IGMP protocols
  - Basic PIM settings
  - Managing multicast interfaces
- Managing virtual routing and forwarding (VRF) tables
  - Creating a virtual routing and forwarding table
  - Modifying the virtual routing and forwarding table
  - Deleting a virtual routing and forwarding table
- Monitoring traffic packet information using the NetFlow protocol
  - Managing NetFlow templates
  - Basic NetFlow settings
  - Changing the NetFlow template of a CPE Device
- Diagnosing a CPE device
  - Requesting diagnostic information
  - Enabling interactive mode
  - Running the ping utility
  - Running the traceroute utility
  - Running the tcpdump utility
  - Running the iperf utility
  - Running the sweep utility
  - Managing report files
    - Downloading a report file
    - Deleting a report file
- Running scheduled tasks on CPE devices
  - Creating a scheduled task
  - Manually running a scheduled task
  - Deleting a scheduled task
IP address and subnet ranges for CPE devices
- Managing IP address ranges
- Managing subnet ranges
Managing the firewall
- Managing firewall zones
- Managing forwarding
  - Creating a forwarding
  - Deleting a forwarding
- Managing firewall templates
- Basic firewall settings
- Configuring DPI marking
- Managing firewall rules
- Managing IP sets
- Managing DNAT rules
- Managing SNAT rules
- Changing the firewall template of a CPE device
Managing network services and virtualization of network functions
- Managing network service templates
- Managing network services
- Scenario: Deploying a virtual network function
- Scenario: Deploying a physical network function
- Managing VNF and PNF packages
- Specifying a brief description of a shared network service
- Managing virtual network functions
- Managing physical network functions
  - Selecting the flavour of a physical network function
  - Basic settings of a physical network function
- Configuring a P2P service
- Configuring a P2M service
- Configuring an M2M service
- Configuring a shared network (OS 2 SHARED)
- Configuring a virtual router (OS vRouter)
- Configuring a VLAN
- Configuring a VXLAN
- Configuring a flat network
- Configuring a UNI
Monitoring solution components
- Specifying the Zabbix server
- Specifying the Zabbix proxy server
- Configuring CPE device monitoring
- Viewing monitoring results
- Viewing problems
- Viewing the status of the solution and its components
- Viewing logs
- Viewing and deleting service requests
- Sending CPE device notifications to users
  - Specifying the SMTP Server
  - Configuring notifications
- Selecting the Docker container log verbosity
- Monitoring CPE, VNF, and PNF devices using SNMP
- Link monitoring
Building an SD-WAN network between CPE devices
- About the Hub-and-Spoke topology
- About Full-Mesh and Partial-Mesh topologies
- Assigning a role to a CPE device
- Assigning a topology tag to a CPE device
- Configuring paths
- Managing links
- Managing segments
Quality of Service (QoS)
- Managing traffic classes
- Managing traffic classifiers
- Managing quality of service rules
- Managing Manual-TE constraints
- Managing threshold constraints
- Managing traffic classification rules
- Managing traffic filters
Transmission of traffic between CPE devices and client devices using transport services
- Traffic packet duplication
- Scenario: Directing application traffic to a transport service
- Managing Point-to-Point (P2P) transport services
- Managing Point-to-Multipoint (P2M) transport services
- Managing Multipoint-to-Multipoint (M2M) transport services
- Managing L3 VPN transport services
- Managing IP multicast transport services
- Managing transport services in an SD-WAN instance template
- Managing transport services in a CPE template
- Traffic mirroring and forwarding between CPE devices
  - Managing traffic destinations
    - Creating a traffic destination
    - Deleting a traffic destination
  - Managing TAP services
Appendices
Glossary
- Control plane
- Controller
- Customer Premise Equipment (CPE)
- Data plane
- Orchestrator
- Physical Network Function (PNF)
- PNF package
- Port security
- SD-WAN Gateway
- SD-WAN instance
- Software-Defined Networking (SDN)
- Software-Defined Wide Area Network (SD-WAN)
- Tenant
- Transport strategy
- Universal CPE (uCPE)
- Virtual Deployment Unit (VDU)
- Virtual Infrastructure Manager (VIM)
- Virtual Network Function Manager (VNFM)
- VNF Package
Contacting Technical Support
- How to obtain Technical Support
- Technical Support via Kaspersky CompanyAccount
Information about third-party code
Trademark notices

Appendices

You can get additional information about Kaspersky SD-WAN from the following guides:

Article ID: 242805, Last review: Oct 14, 2024

Page top