Kaspersky SD-WAN

Managing transport services in an SD-WAN instance template

To display the table of P2M services and M2M services in an SD-WAN instance template, go to the SD-WAN → SD-WAN instance templates section, click the SD-WAN instance template, and select the Transport services tab. Information about P2M services and M2M services is displayed in the following columns of the table:

• Name is the name of the P2M service or M2M service.
• Type is the type of transport service:
  • P2M
  • M2M
• Management tunnel indicates whether the P2M service or M2M service is a management service:
  • Yes
  • No
• Mode indicates whether a DFI (Default Forwarding Interface) is used in the P2M service, to which unknown unicast traffic is sent:
  • Classic if you do not want to use DFI. Default value.
  • DFI with FIB on root and leafs if you want to use DFI on the service interface with the root role.
  • DFI with FIB on leaf if you want to use DFI on the service interface with the root role. Service interfaces with the leaf role must be created on the same CPE device. Backup service interfaces with the leaf role must be created on the same CPE device, which must be different from the CPE device on which the primary service interfaces are created.

  The value in this column is displayed only if the value in the Type column is P2M.

• MAC age (sec.) is the time period in seconds during which entries are kept in the MAC table of the controller.
• MAC learn mode is the action applied to a series of frames when the first frame is sent to the controller to learn the source MAC address:
  • Learn and flood means the controller remembers the MAC address of the source and checks for the presence of the destination MAC address in the MAC table. If the destination MAC address is not in the MAC table, the series of frames is sent to all service interfaces added to the M2M service, except for the service interface on which the series of frames originally arrived.
  • Learn and drop means the controller remembers the MAC address of the source and checks for the presence of the destination MAC address in the MAC table. If the destination MAC address is not in the MAC table, the series of frames is dropped.

  If the destination MAC address is present in the MAC table, the series of frames is sent to the destination service interface.

• MAC table size is the maximum number of entries in the MAC table on the controller.
• MAC table overload is the policy for processing new MAC addresses when the MAC table of the controller is full:
  • Flood means traffic with destination MAC addresses that have not been learned is transmitted as BUM traffic (Broadcast, unknown-unicast, and multicast). Default value.
  • Drop means that traffic with destination MAC addresses that have not been learned is dropped.

To display a list of L3 VPN services, select the L3 services tab.