When enabling or disabling traffic encryption on a link, you must configure the opposite-direction link in the same way.
To enable encryption of traffic on a link:
Enable traffic encryption on the link in one of the following ways:
If you want to enable traffic encryption for a link that was established from a CPE device, go to the SD-WAN → CPE section, click the CPE device, select the Tunnels tab, and click Management → Set encryption next to the link.
If you want to enable traffic encryption for one of the links in the table of all links, go to the Infrastructure section, click Management → Configuration menu next to the controller, go to the Tunnels section, and click Management → Set encryption next to the link.
If you want to enable traffic encryption for one of the links in the graphic topology with all links, go to the Infrastructure section, click Management → Configuration menu next to the controller, go to the Topology section, click the link, and click Set encryption.
This opens a window, in that window, select the Override check box. This check box is cleared by default.
Select the Enable encryption check box to enable traffic encryption for the link. This check box is cleared by default.
Click Save.
Traffic encryption is enabled on the link.
If you enabled traffic encryption for a link established from the CPE device, click Save in the upper part of the settings area to save the CPE device settings.