Kaspersky SD-WAN

Creating a traffic classifier

Expand all | Collapse all

You can create a traffic classifier in an already deployed SD-WAN instance or in an SD-WAN instance template. If you create a traffic classifier in an SD-WAN instance template and use that template to deploy an individual instance, the same traffic classifier is automatically created in the deployed instance.

To create a traffic classifier, use the following instructions:

• Creating a traffic classifier in an already deployed SD-WAN instance.

  To create a traffic classifier in an already deployed SD-WAN instance:

  1. In the menu, go to the Infrastructure section.

     The SD-WAN infrastructure management page is displayed. By default, the Network resources tab is selected, which displays the table of SD-WAN Controllers.

  2. Click Management next to the SD-WAN Controller and in the drop-down list, select Configuration menu.

     This opens the SD-WAN Controller configuration menu. By default, you are taken to the Controller nodes section, which displays a table of Controller nodes.

  3. Go to the QoS section.

     The Traffic classes tab, which is selected by default, displays the table of traffic classes.

  4. Select the Traffic classifiers tab.

     A table of traffic classes is displayed.

  5. Click + Classifier.
  6. This opens a window; in that window, in the Name field, enter the name of the traffic classifier.
  7. In the Type list, select one of the following values:
     • Trust is a classifier that trusts the DSCP values set in the header fields of traffic packets. This is the default setting.
     • Untrust is a classifier that does not trust the DSCP values set in the traffic packet header fields.
  8. If you selected Trust in the Type list, map the classes to DSCP values in the traffic packet headers:
     1. In the Traffic class column, select the class into which you want to place the traffic.
     2. In the External tag column, click Select next to the package header that must contain the necessary DSCP value.
     3. Select the check boxes next to the displayed DSCP values that must be present in the packet header for the traffic to be placed in the selected class.
     4. Click Ok.
  9. If in the Type lust you selected Untrust, select the class in which you want to place all traffic in the Traffic class class drop-down list.
  10. Click Create.

  The traffic classifier is created and displayed in the table.

• Creating a traffic classifier in an SD-WAN instance template.

  To create a traffic classifier in an SD-WAN instance template:

  1. In the menu, go to the SD-WAN → SD-WAN instance templates subsection.

     A table of SD-WAN instance templates is displayed.

  2. Click the SD-WAN Instance template.

     The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

  3. Select the Traffic classifiers tab.

     A table of traffic classes is displayed.

  4. Click + Classifier.
  5. This opens a window; in that window, in the Name field, enter the name of the traffic classifier.
  6. In the Type list, select one of the following values:
     • Trust is a classifier that trusts the DSCP values set in the header fields of traffic packets. This is the default setting.
     • Untrust is a classifier that does not trust the DSCP values set in the traffic packet header fields.
  7. If you selected Trust in the Type list, map the classes to DSCP values in the traffic packet headers:
     1. In the Traffic class column, select the class into which you want to place the traffic.
     2. In the External tag column, click Select next to the package header that must contain the necessary DSCP value.
     3. Select the check boxes next to the displayed DSCP values that must be present in the packet header for the traffic to be placed in the selected class.
     4. Click Ok.
  8. If in the Type lust you selected Untrust, select the class in which you want to place all traffic in the Traffic class class drop-down list.
  9. Click Create.

     The traffic classifier is created and displayed in the table.

  10. In the upper part of the settings area, click Save to save the configuration of the SD-WAN instance template.