Kaspersky SD-WAN

Kaspersky SD-WAN

Print page
Print section
Print all

Support Send link Get as PDF

2.3
2.2
2.0

Русский

2.3
2.2
2.0

Русский

About Kaspersky SD-WAN
- Distribution kit
- Hardware and software requirements
- Shared storage requirements
- What's new
Architecture of the solution
Redundancy and fault tolerance
- Redundancy of central components of the solution
- Redundancy of communication channels between CPE devices
Ensuring security
User interface of the solution
- Authentication in Kaspersky SD-WAN
- Setting and resetting the default page
- Switching between light and dark theme
- Limiting the duration of a user session when idle
- Viewing active user sessions
- Configuring the Docker container log verbosity
- Navigating to the orchestrator API
- Changing the language of the orchestrator web interface
Licensing of Kaspersky SD-WAN
- About the End User License Agreement
- About data provision
Managing Kaspersky SD-WAN domains
- Creating a domain
- Editing a domain
- Deleting a domain
Managing data centers
- Adding a data center
- Migrating a data center
- Editing a data center
- Deleting a data center
Managing VIMs
- Configuring the VIM
- Viewing VIM usage
- Editing a VIM
- Deleting a VIM
Managing subnets
- Creating a subnet
- Editing a subnet
- Deleting a subnet
Viewing logs
Service Requests
Managing network services
- User roles and actions with network services
- Uploading a VNF or PNF package to the orchestrator
- Network service template
  - Creating a network service template
  - Deleting a network service template
- Creating a network service
- Configuring network service topology components
- Editing a network service topology
- Deploying a network service
- Checking the consistency of a network service
- Redeploying a network service and its components
- Auto-Healing
- Managing VNFs and VDUs in a network service
- Viewing the network service log
- Deleting a network service
Managing confirmation requests
- Viewing confirmation requests
- Confirming, denying, and deleting confirmation requests
Managing users
- Creating an LDAP connection
- Editing an LDAP connection
- Changing the password of an LDAP connection
- Deleting an LDAP connection
- Creating access permissions
- Editing access permissions
- Cloning access permissions
- Removing an access permission
- Creating a user
- Editing a user
- Changing user password
- Activating or blocking a user
- Deleting a user
- Creating a user group
- Editing a user group
- Deleting a user group
Managing tenants
- Creating a tenant
- Assigning a VIM to a tenant
- Assigning topology components to a tenant
- Assigning compute resources to a tenant
- Assigning a user to a tenant
- Assigning a user group to a tenant
- Authenticating as an administrator in the tenant's orchestrator web interface
- Editing a tenant
- Deleting a tenant
Managing SD-WAN instances
- Creating an SD-WAN instance template
- Setting the default SD-WAN instance template
- Deleting an SD-WAN instance template
- Adding a tenant to an SD-WAN instance template
- Removing a tenant from an SD-WAN instance template
- Configuring high availability
- Choosing a transport strategy
- Adding a tenant to an SD-WAN instance
- Removing a tenant from an SD-WAN instance
- Viewing devices assigned to an SD-WAN Instance
- Deleting an SD-WAN instance
- Creating a pool of SD-WAN instances
- Adding an SD-WAN instance to a pool
- Removing an SD-WAN instance from a pool
- Deleting a pool of SD-WAN instances
Managing CPE devices
- Composition of CPE devices
- Composition of uCPE devices
- SD-WAN managementTunnel management transport service
- Automatic configuration of CPE (ZTP) devices
- CPE device statuses and states
- Ensuring connectivity of CPE devices with SD-WAN Controllers
- Automatically updating the link cost based on maximum speed of the interface
- CPE template
  - Creating a CPE template
  - Exporting a CPE template
  - Importing a CPE template
  - Cloning a CPE template
  - Exporting settings and SD-WAN interfaces from a CPE template
  - Exporting network interfaces from a CPE template
  - Viewing devices that are using a CPE template
  - Deleting a CPE template
- Creating a CPE device
- Specifying the address of a CPE device
- Registering a CPE device
- Activating or deactivating a CPE device
- Using a web address to activate a CPE device
- Connecting to the CPE device console
- Deleting a CPE device
- Viewing the password of a CPE device
- Restarting a CPE device
- Shutting down a CPE device
- Exporting settings and SD-WAN interfaces from a CPE device
- Exporting network interfaces from a CPE device
- Searching for CPE devices
- Automatic removal and deactivation of a CPE device
- Two-factor authentication of a CPE device
- Orchestrator certificates
  - Uploading an orchestrator certificate
  - Viewing an orchestrator certificate
  - Manually distributing an orchestrator certificate to CPE devices
  - Exporting an orchestrator certificate
- Tags
  - Assigning tags to CPE devices
  - Removing CPE device tags
- Out-of-band management of CPE devices
- Managing CPE devices in SD-WAN controller menu
  - Viewing the OpenFlow table of a CPE device
  - Viewing statistics of OpenFlow interfaces
  - Viewing statistics of queues on LAN interfaces
  - Navigating to service interfaces on a CPE device
  - Viewing the specifications of a CPE device
  - Viewing the usage of a CPE device
  - Changing the status of a CPE device in the SD-WAN Controller
  - Changing the MAC address of a CPE device
  - Terminating the TCP session between a CPE device and the SD-WAN Controller
- Scripts
  - Configuring a VNFM connection to the console of a CPE device
  - Adding a script
  - Editing a script
  - Viewing the contents of a script
  - Deleting a script
  - Configuring the script run order
  - Manually running scripts
  - Delayed scripts
- Network interfaces
  - Creating a network interface
  - Editing a network interface
  - Disabling a network interface
  - Deleting a network interface
- Configuring the connection of a CPE device to the SD-WAN network
- SD-WAN interfaces
  - Providing information about WAN interfaces to the SD-WAN Controller
  - Overriding the IP address and port for connecting an interface to the SD-WAN controller
  - Creating an SD-WAN interface
  - Editing an SD-WAN interface
  - Disabling an SD-WAN interface
  - Deleting an SD-WAN interface
- OpenFlow interfaces
  - Creating a group of OpenFlow interfaces
  - Editing a group of OpenFlow interfaces
  - Deleting a group of OpenFlow interfaces
- Service interfaces and UNIs
  - Creating a service interface
  - Creating an ACL interface
  - Viewing the usage of a service interface and an ACL interface
  - Deleting a service interface and an ACL interface
  - Creating a UNI template
  - Creating a UNI in a template
  - Editing a UNI in a template
  - Deleting a UNI in a template
  - Deleting a UNI template
  - Creating a UNI
  - Editing a UNI
  - Deleting a UNI
- Filtering routes
  - Creating an access-control list (ACL)
  - Editing an access control list
  - Deleting an access control list
  - Creating a prefix list
  - Editing a prefix list
  - Deleting a prefix list
  - Creating a route map
  - Editing a route map
  - Deleting a route map
- The BGP dynamic routing protocol
  - Configuring the BGP protocol
  - Creating a BGP peer
  - Editing a BGP peer
  - Deleting a BGP peer
  - Creating a BGP peer group
  - Editing a BGP peer group
  - Deleting a BGP peer group
- The OSPF dynamic routing protocol
  - Configuring the OSPF protocol
  - Creating an OSPF area
  - Editing an OSPF area
  - Deleting an OSPF area
  - Creating an OSPF interface
  - Editing an OSPF interface
  - Deleting an OSPF interface
- The BFD protocol
  - Enabling or disabling the BFD protocol
  - Creating a BFD peer
  - Editing a BFD peer
  - Deleting a BFD peer
- Creating or deleting a static IPv4 route
- The VRRP protocol
  - Enabling or disabling the VRRP protocol
  - Creating a VRRP instance
  - Editing a VRRP instance
  - Deleting a VRRP instance
  - Creating a group of VRRP instances
  - Editing a group of VRRP instances
  - Deleting a group of VRRP instances
- Viewing the settings of the CPE device connection to the service provider network
- Configuring the connection of a CPE device to a Syslog server
- Configuring the connection of a CPE device to an NTP server
- Firmware
  - Uploading firmware
  - Finding CPE devices with outdated firmware
  - Updating firmware
  - Deleting firmware
Monitoring solution components
- Connecting to a Zabbix server
- Connecting to a Zabbix proxy server
- Configuring CPE device monitoring
- Viewing monitoring results
- Viewing errors
- Enabling monitoring on a link
- Viewing the status of the solution and its components
- SNMP protocol
Tunnels, segments, and paths
- Configuring paths
- Creating a Manual-TE path
- Editing a Manual-TE path
- Deleting a hop from a Manual-TE path
- Deleting a Manual-TE path
- Specifying the cost of a link
- Enabling Dampening
- Enabling Forward Error Correction
- Determining the effective MTU in a link
- Package fragmentation
- Traffic encryption
  - Traffic encryption on a CPE device
  - Traffic encryption on a link
Configuring topology
- About the Hub-and-Spoke topology
- About Full-Mesh and Partial-Mesh topologies
- Creating a Hub-and-Spoke topology
- Creating Full-Mesh and Partial-Mesh topologies
Quality of Service (QoS)
- Traffic classes
  - Default traffic classes
  - Creating or editing traffic classes
- Traffic classifiers
- QoS rules
- Constraints
- Traffic classification rules
- Traffic filters
Transport services
- Point-to-Point (P2P) transport service
- Point-to-Multipoint (P2M) transport service
- Multipoint-to-Multipoint (M2M) transport service
- Adding a transport service in a CPE template
- Editing a transport service in a CPE template
- Deleting a transport service from a CPE template
- Scenario: Directing application traffic to a transport service
Traffic mirroring
- Creating a traffic destination
- Deleting a traffic destination
- Creating a TAP service
- Editing a TAP service
- Viewing statistics of a TAP service
- Deleting a TAP service
Task scheduler
- Creating a delayed task
- Executing a delayed task manually
- Deleting a delayed task
Configuring the SD-WAN Controller
- Editing the SD-WAN Controller
- Restarting the SD-WAN Controller
- Downloading a backup SD-WAN Controller configuration file
- Restoring the SD-WAN Controller
- Deleting the SD-WAN Controller
- SD-WAN Controller properties
  - Editing or resetting SD-WAN Controller properties
  - Deleting an SD-WAN Controller property planning value
- Viewing information about SD-WAN Controller nodes
- Viewing the topology of a deployed SD-WAN instance
Contacting Technical Support
- How to obtain Technical Support
- Technical Support via Kaspersky CompanyAccount
Appendices
- Kaspersky SD-WAN deployment guide for a VMware environment
Glossary
- Control plane
- Customer Premise Equipment (CPE)
- Data plane
- DSCP values
- Graceful restart
- Orchestrator
- Physical Network Function (PNF)
- PNF package
- SD-WAN Controller
- SD-WAN Gateway
- Software-Defined Networking (SDN)
- Software-Defined Wide Area Network (SD-WAN)
- Tenant
- Universal CPE (uCPE)
- Virtual Infrastructure Manager (VIM)
- Virtual Network Function (VNF)
- Virtual Network Function Manager (VNFM)
- VNF Package
Information about third-party code
Trademark notices

Appendices

This section provides information that complements the main document text with reference information.

Article ID: 242805, Last review: Aug 21, 2024

Page top

© 2025 AO Kaspersky Lab

Privacy Policy Cookies