You can enable or disable traffic encryption in a CPE template or on a CPE device. Traffic encryption settings specified in the CPE template are automatically propagated to all CPE devices that use this CPE template.
To enable traffic encryption on a CPE device:
Enable traffic encryption on the CPE device in one of the following ways:
If you want to enable traffic encryption in a CPE template, go to the SD-WAN → CPE templates menu section, click the CPE template, and select the Tunnel encryption tab.
If you want to enable traffic encryption on a CPE device, go to the SD-WAN → CPE menu section, click the CPE device, select the Tunnel encryption tab, and select the Override check box.
The traffic encryption policy is displayed.
In the Default encryption policy drop-down list, select one of the following values:
Enabled
Disabled (default).
In the upper part of the settings area, click Save to save the settings of the CPE template or CPE device.