User interface of the solution

Kaspersky SD-WAN is managed using the orchestrator web interface. You can use the menu sections to configure the components of the solution. When you navigate to a section, an additional menu with subsections is displayed in a collapsed form. To expand the menu, hover your mouse cursor over the icon of one of the subsections. You can click the expand icon Expanding the navigation pane to disable the automatic minimization of the menu.

Two variants of the orchestrator web interface are supported:

The administrator portal gives administrators full access to managing the solution components.
The self-service portal gives tenants access to managing the SD-WAN instances that are deployed for them.

Administrators can log in to the self-service portal of a tenant.

Administrator portal

The menu of the administrator portal is shown in the figure below.

navigation_panel_2

Menu of the administrator portal

Section	Description
Dashboard	Information about the current status of solution components, such as CPE devices, virtual network functions, and physical network functions.
Infrastructure	Corporate infrastructure. In this section, you can configure the following components: Domains Data centers Management subnets Controllers VIM
Catalog	Network service templates for centralized configuration of network services
SD-WAN	CPE — CPE devices for relaying traffic. CPE templates — CPE templates for centralized configuration of CPE devices. Firewall templates — firewall templates for centralized configuration of the firewall on CPE devices. Firewall zones — firewall zones for network interfaces and subnets of CPE devices. NetFlow templates — NetFlow templates for monitoring traffic packet information on CPE devices. IPAM — IP address and subnet ranges for CPE devices. Firmware — CPE device firmware. Certificates — certificates of CPE devices. SD-WAN instances — deployed SD-WAN instances. SD-WAN instance templates — SD-WAN instance templates for centralized configuration and deployment of SD-WAN instances. SD-WAN instance pools — SD-WAN instance pools. UNI templates — UNI templates for centralized creation of UNIs on CPE devices.
Scheduler	Tasks that are scheduled to run later.
Logs	Logs of solution components, such as CPE devices, virtual network functions, and physical network functions.
Tenants	Tenants of the solution.
Users	Users of the solution. In this section, you can configure the following components: Users Access permissions LDAP user groups LDAP connections
Confirmation	Confirmation requests for user actions.
System	Monitoring contains Zabbix server settings for monitoring solution components. Notification contains settings for sending email notifications to users. Orchestrator log is the Docker container log verbosity. User serssion contains user session settings. API is the orchestrator API. Other contains additional settings.

The controller has its own configuration menu (see figure below).

Controller_config_menu_2

Controller configuration menu on the administrator portal

Section	Description
Controller nodes	Information about the current status of controller nodes.
Switches	Advanced settings of CPE devices and switches.
Topology	Graphical topology of an SD-WAN instance.
Topology tags	Topology tags for establishing links between CPE devices.
Segments	Segments formed from CPE devices and switches.
QoS	Quality of service settings. In this section, you can configure the following components: Traffic classes Traffic classifiers Quality of service rules
P2P services	Point-to-Point transport services.
P2M services	Point-to-Multipoint transport services.
M2M services	Multipoint-to-Multipoint transport services.
IP multicast services	IP multicast transport services.
L3 VPN services	L3 VPN transport services.
TAP services	TAP (Test Access Point) services for traffic mirroring.
Service interfaces	Service interfaces of CPE devices and switches.
Constraints	Manual-TE constraints and threshold constraints for assuring quality of service.
Traffic filters	Traffic filters for enforcing quality of service.
Port groups	OpenFlow port groups.
Links	Links between CPE devices and switches, and links between CPE devices.
Logs	Docker container log verbosity level.
SNMP	Settings for monitoring CPE devices, virtual network functions, and physical network functions using SNMP.

Self-service portal

The menu of the self-service portal is shown in the figure below.

navigation_panel_tenant_2

Menu of the self-service portal

Section	Description
Dashboard	Information about the current status of solution components such as CPE devices and network functions.
Infrastructure	Corporate infrastructure. In this section, you can configure controllers.
Catalog	Network services for traffic transmission and virtualization of network functions.
SD-WAN	CPE — CPE devices for relaying traffic. CPE templates — CPE templates for centralized configuration of CPE devices. Firewall templates — firewall templates for centralized configuration of the firewall on CPE devices. Firewall zones — firewall zones for network interfaces and subnets of CPE devices. NetFlow templates — NetFlow templates for monitoring traffic packet information on CPE devices. IPAM — IP address and subnet ranges for CPE devices. UNI templates — UNI templates for centralized creation of UNIs on CPE devices.
Scheduler	Tasks that are scheduled to run later.
Logs	Logs of solution components, such as CPE devices, virtual network functions, and physical network functions.
Confirmation	Confirmation requests for user actions.
System	Notification contains settings for sending email notifications to users. User serssion contains user session settings.

The controller has its own configuration menu (see figure below).

Controller_config_menu_tenant_2

Section	Description
Switches	Advanced settings of CPE devices and switches.
Topology	Graphical topology of an SD-WAN instance.
Segments	Segments formed from CPE devices and switches.
P2P services	Point-to-Point transport services.
P2M services	Point-to-Multipoint transport services.
M2M services	Multipoint-to-Multipoint transport services.
IP multicast services	IP multicast transport services.
L3 VPN services	L3 VPN transport services.
TAP services	TAP services for traffic mirroring.
Service interfaces	Service interfaces of CPE devices and switches.
Constraints	Manual-TE constraints and threshold constraints for assuring quality of service.
Traffic filters	Traffic filters for enforcing quality of service.
Port groups	OpenFlow port groups.
Links	Links between CPE devices and switches, and links between CPE devices.

In this Help section

Setting and resetting the default page

Switching between light and dark modes of the orchestrator web interface

Changing the language of the orchestrator web interface

Managing solution component tables

Page top