Kaspersky SD-WAN
- About Kaspersky SD-WAN
- Architecture of the solution
- Redundancy and fault tolerance
- Ensuring security
- User interface of the solution
- Authentication in Kaspersky SD-WAN
- Setting and resetting the default page
- Switching between light and dark theme
- Limiting the duration of a user session when idle
- Viewing active user sessions
- Configuring the Docker container log verbosity
- Navigating to the orchestrator API
- Changing the language of the orchestrator web interface
- Licensing of Kaspersky SD-WAN
- Managing Kaspersky SD-WAN domains
- Managing data centers
- Managing VIMs
- Managing subnets
- Viewing logs
- Service Requests
- Managing network services
- User roles and actions with network services
- Uploading a VNF or PNF package to the orchestrator
- Network service template
- Creating a network service
- Configuring network service topology components
- Editing a network service topology
- Deploying a network service
- Checking the consistency of a network service
- Redeploying a network service and its components
- Auto-Healing
- Managing VNFs and VDUs in a network service
- Viewing the network service log
- Deleting a network service
- Managing confirmation requests
- Managing users
- Creating an LDAP connection
- Editing an LDAP connection
- Changing the password of an LDAP connection
- Deleting an LDAP connection
- Creating access permissions
- Editing access permissions
- Cloning access permissions
- Removing an access permission
- Creating a user
- Editing a user
- Changing user password
- Activating or blocking a user
- Deleting a user
- Creating a user group
- Editing a user group
- Deleting a user group
- Managing tenants
- Creating a tenant
- Assigning a VIM to a tenant
- Assigning topology components to a tenant
- Assigning compute resources to a tenant
- Assigning a user to a tenant
- Assigning a user group to a tenant
- Authenticating as an administrator in the tenant's orchestrator web interface
- Editing a tenant
- Deleting a tenant
- Managing SD-WAN instances
- Creating an SD-WAN instance template
- Setting the default SD-WAN instance template
- Deleting an SD-WAN instance template
- Adding a tenant to an SD-WAN instance template
- Removing a tenant from an SD-WAN instance template
- Configuring high availability
- Choosing a transport strategy
- Adding a tenant to an SD-WAN instance
- Removing a tenant from an SD-WAN instance
- Viewing devices assigned to an SD-WAN Instance
- Deleting an SD-WAN instance
- Creating a pool of SD-WAN instances
- Adding an SD-WAN instance to a pool
- Removing an SD-WAN instance from a pool
- Deleting a pool of SD-WAN instances
- Managing CPE devices
- Composition of CPE devices
- Composition of uCPE devices
- SD-WAN managementTunnel management transport service
- Automatic configuration of CPE (ZTP) devices
- CPE device statuses and states
- Ensuring connectivity of CPE devices with SD-WAN Controllers
- Automatically updating the link cost based on maximum speed of the interface
- CPE template
- Creating a CPE device
- Specifying the address of a CPE device
- Registering a CPE device
- Activating or deactivating a CPE device
- Using a web address to activate a CPE device
- Connecting to the CPE device console
- Deleting a CPE device
- Viewing the password of a CPE device
- Restarting a CPE device
- Shutting down a CPE device
- Exporting settings and SD-WAN interfaces from a CPE device
- Exporting network interfaces from a CPE device
- Searching for CPE devices
- Automatic removal and deactivation of a CPE device
- Two-factor authentication of a CPE device
- Orchestrator certificates
- Tags
- Out-of-band management of CPE devices
- Managing CPE devices in SD-WAN controller menu
- Viewing the OpenFlow table of a CPE device
- Viewing statistics of OpenFlow interfaces
- Viewing statistics of queues on LAN interfaces
- Navigating to service interfaces on a CPE device
- Viewing the specifications of a CPE device
- Viewing the usage of a CPE device
- Changing the status of a CPE device in the SD-WAN Controller
- Changing the MAC address of a CPE device
- Terminating the TCP session between a CPE device and the SD-WAN Controller
- Scripts
- Network interfaces
- Configuring the connection of a CPE device to the SD-WAN network
- SD-WAN interfaces
- OpenFlow interfaces
- Service interfaces and UNIs
- Creating a service interface
- Creating an ACL interface
- Viewing the usage of a service interface and an ACL interface
- Deleting a service interface and an ACL interface
- Creating a UNI template
- Creating a UNI in a template
- Editing a UNI in a template
- Deleting a UNI in a template
- Deleting a UNI template
- Creating a UNI
- Editing a UNI
- Deleting a UNI
- Filtering routes
- The BGP dynamic routing protocol
- The OSPF dynamic routing protocol
- The BFD protocol
- Creating or deleting a static IPv4 route
- The VRRP protocol
- Viewing the settings of the CPE device connection to the service provider network
- Configuring the connection of a CPE device to a Syslog server
- Configuring the connection of a CPE device to an NTP server
- Firmware
- Monitoring solution components
- Tunnels, segments, and paths
- Configuring topology
- Quality of Service (QoS)
- Transport services
- Point-to-Point (P2P) transport service
- Point-to-Multipoint (P2M) transport service
- Multipoint-to-Multipoint (M2M) transport service
- Adding a transport service in a CPE template
- Editing a transport service in a CPE template
- Deleting a transport service from a CPE template
- Scenario: Directing application traffic to a transport service
- Traffic mirroring
- Task scheduler
- Configuring the SD-WAN Controller
- Editing the SD-WAN Controller
- Restarting the SD-WAN Controller
- Downloading a backup SD-WAN Controller configuration file
- Restoring the SD-WAN Controller
- Deleting the SD-WAN Controller
- SD-WAN Controller properties
- Viewing information about SD-WAN Controller nodes
- Viewing the topology of a deployed SD-WAN instance
- Contacting Technical Support
- Appendices
- Glossary
- Control plane
- Customer Premise Equipment (CPE)
- Data plane
- DSCP values
- Graceful restart
- Orchestrator
- Physical Network Function (PNF)
- PNF package
- SD-WAN Controller
- SD-WAN Gateway
- Software-Defined Networking (SDN)
- Software-Defined Wide Area Network (SD-WAN)
- Tenant
- Universal CPE (uCPE)
- Virtual Infrastructure Manager (VIM)
- Virtual Network Function (VNF)
- Virtual Network Function Manager (VNFM)
- VNF Package
- Information about third-party code
- Trademark notices
Creating a network interface
You can create a network interface on an individual CPE device or on all devices that use the CPE template. To create a network interface, use the following instructions:
- Creating a network interface with automatic assignment of an IP address via DHCP on an individual CPE device.
To create a network interface and automatically assign an IP address to it using DHCP on an individual CPE device:
- In the menu, go to the SD-WAN section.
By default, the CPE subsection is displayed with a table of CPE devices.
- Click the CPE device.
The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button
.
- Select the Network settings tab.
The table of network interfaces is displayed.
- Click + Network interface.
- This opens a window; in that window, in the Alias field, enter an alias that you can reference when creating an SD-WAN interface. Maximum length: 15 characters. The default setting is
eth1
.Enter the value in the format: sdwan<interface number>. For example, if you are creating a network interface that the first SD-WAN interface will be mapped to, enter
sdwan1
. - In the Interface name field, enter the name of the physical interface of the CPE device. Maximum length: 256 characters. For example, you can enter
eth0
,eth1
,eth2
, ortun0
. To create a bridge from multiple physical interfaces, enter their names separated by spaces. - Select the Bridge check box to create a bridge from the interfaces specified in the Interface name field. This check box is cleared by default.
- In the Protocol drop-down list, select DHCP client.
- If necessary, select the following check boxes:
- Select theEnable automatically check box to have the network interface enabled automatically simultaneously with the CPE device.
- Select the Force IP, route, and gateway check box to automatically assign a default IP address, route, and gateway to the network interface. The assignment occurs even if there is no connection to the network interface.
- Select the Use default route check box to use the default route received via the DHCP protocol on the network interface.
By default, all check boxes are selected.
- If necessary, add a DNS server:
- Under DNS servers, click + Add.
- In the field that is displayed, enter the IP address of the server.
DNS servers make it possible for network devices to resolve domain names into IP addresses and thus support DNS-reliant applications such as browsers and email. You can add multiple servers.
- In the Override MAC field, enter the MAC address of the network interface. The entered value overrides the default MAC address.
- In the Override MTU field, enter the MTU for the network interface. The entered value overrides the default MTU.
- In the Route metric field, enter
100
if you are creating the first WAN interface. For each subsequent WAN interface, increment the value by 1. For example, for the second WAN interface, enter101
. - Click Create.
The network interface is created and displayed in the table.
- In the upper part of the settings area, click Save to save the configuration of the CPE device.
- In the menu, go to the SD-WAN section.
- Creating a network interface with automatic assignment of an IP address via DHCP on all devices that use the CPE template.
To create a network interface and automatically assign an IP address to it using DHCP on all devices that use the CPE template:
- In the menu, go to the SD-WAN → CPE templates subsection.
A table of CPE templates is displayed.
- Click the CPE template.
The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button
.
- Select the Network settings tab.
The table of network interfaces is displayed.
- Click + Network interface.
- This opens a window; in that window, in the Alias field, enter an alias that you can reference when creating an SD-WAN interface. Maximum length: 15 characters. The default setting is
eth1
.Enter the value in the format: sdwan<interface number>. For example, if you are creating a network interface that the first SD-WAN interface will be mapped to, enter
sdwan1
. - In the Interface name field, enter the name of the physical interface of the CPE device. Maximum length: 256 characters. For example, you can enter
eth0
,eth1
,eth2
, ortun0
. To create a bridge from multiple physical interfaces, enter their names separated by spaces. - Select the Bridge check box to create a bridge from the interfaces specified in the Interface name field. This check box is cleared by default.
- In the Protocol drop-down list, select DHCP client.
- If necessary, select the following check boxes:
- Select theEnable automatically check box to have the network interface enabled automatically simultaneously with the CPE device.
- Select the Force IP, route, and gateway check box to automatically assign a default IP address, route, and gateway to the network interface. The assignment occurs even if there is no connection to the network interface.
- Select the Use default route check box to use the default route received via the DHCP protocol on the network interface.
By default, all check boxes are selected.
- If necessary, add a DNS server:
- Under DNS servers, click + Add.
- In the field that is displayed, enter the IP address of the server.
DNS servers make it possible for network devices to resolve domain names into IP addresses and thus support DNS-reliant applications such as browsers and email. You can add multiple servers.
- In the Override MAC field, enter the MAC address of the network interface. The entered value overrides the default MAC address.
- In the Override MTU field, enter the MTU for the network interface. The entered value overrides the default MTU.
- In the Route metric field, enter
100
if you are creating the first WAN interface. For each subsequent WAN interface, increment the value by 1. For example, for the second WAN interface, enter101
. - Click Create.
The network interface is created and displayed in the table.
- In the upper part of the settings area, click Save to save the configuration of the CPE template.
- In the menu, go to the SD-WAN → CPE templates subsection.
- Creating a network interface with a static IPv4 address on an individual CPE device.
To create a network interface and assign it a static IPv4 address on an individual CPE device:
- In the menu, go to the SD-WAN section.
By default, the CPE subsection is displayed with a table of CPE devices.
- Click the CPE device.
The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button
.
- Select the Network settings tab.
The table of network interfaces is displayed.
- Click + Network interface.
- This opens a window; in that window, in the Alias field, enter an alias that you can reference when creating an SD-WAN interface. Maximum length: 15 characters. The default setting is
eth1
.Enter the value in the format: sdwan<interface number>. For example, if you are creating a network interface that the first SD-WAN interface will be mapped to, enter
sdwan1
. - In the Interface name field, enter the name of the physical interface of the CPE device. Maximum length: 256 characters. For example, you can enter
eth0
,eth1
,eth2
, ortun0
. To create a bridge from multiple physical interfaces, enter their names separated by spaces. - Select the Bridge check box to create a bridge from the interfaces specified in the Interface name field. This check box is cleared by default.
- In the Protocol drop-down list, select Static IPv4 address.
- If necessary, select the following check boxes:
- Select theEnable automatically check box to have the network interface enabled automatically simultaneously with the CPE device.
- Select the Force IP, route, and gateway check box to automatically assign a default IP address, route, and gateway to the network interface. The assignment occurs even if there is no connection to the network interface.
By default, all check boxes are selected.
- In the IPv4 address field, enter the IPv4 address of the network interface. You can specify multiple addresses, separating them with spaces.
- In the IPv4 netmask field, enter the IPv4 address mask.
- In the IPv4 gateway field, enter the IP address of the default gateway. The default gateway in the SD-WAN network enables communication between devices from the local and external networks.
- In the IPv4 broadcast field, enter the broadcast address. If you do not specify a value for this setting, it is generated automatically.
- If necessary, add a DNS server:
- Under DNS servers, click + Add.
- In the field that is displayed, enter the IP address of the server.
DNS servers make it possible for network devices to resolve domain names into IP addresses and thus support DNS-reliant applications such as browsers and email. You can add multiple servers.
- In the Override MAC field, enter the MAC address of the network interface. The entered value overrides the default MAC address.
- In the Override MTU field, enter the MTU for the network interface. The entered value overrides the default MTU.
- In the Route metric field, enter
100
if you are creating the first WAN interface. For each subsequent WAN interface, increment the value by 1. For example, for the second WAN interface, enter101
. - Under DHCP server, in the Type drop-down list, select the operating mode of the DHCP server:
- Disabled (selected by default)
- Relay
- Server
- If in the Type drop-down list, you selected Relay, in the DHCP server IP field, enter the IP address of the server.
- If the Type drop-down list, you selectedServer, specify the DHCP server settings:
- In the First IP field, enter the first IP address to be leased to clients. The default setting is
100
. - In the Limit field, enter the maximum number of IP addresses that can be leased to clients. Range of values: 1 to 250. The default setting is
150
. - In the Lease time field, enter the maximum time, in hours, for which an individual IP address can be leased to a client. Range of values: 1 to 250. The value is specified in the format: <number of hours>h. For example, if you want the maximum lease time to be 5 hours, enter
5h
. The default setting is12h
. - If you want to add a DHCP option, under DHCP options, click + Add and in the displayed field, enter the name of the option. Maximum length: 250 characters. You can add multiple options.
- In the First IP field, enter the first IP address to be leased to clients. The default setting is
- Click Create.
The network interface is created and displayed in the table.
- In the upper part of the settings area, click Save to save the configuration of the CPE device.
- In the menu, go to the SD-WAN section.
- Creating a network interface with a static IPv4 address on all CPE devices that use the CPE template.
To create a network interface and assign it a static IPv4 address on all devices that use the CPE template:
- In the menu, go to the SD-WAN → CPE templates subsection.
A table of CPE templates is displayed.
- Click the CPE template.
The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button
.
- Select the Network settings tab.
The table of network interfaces is displayed.
- Click + Network interface.
- This opens a window; in that window, in the Alias field, enter an alias that you can reference when creating an SD-WAN interface. Maximum length: 15 characters. The default setting is
eth1
.Enter the value in the format: sdwan<interface number>. For example, if you are creating a network interface that the first SD-WAN interface will be mapped to, enter
sdwan1
. - In the Interface name field, enter the name of the physical interface of the CPE device. Maximum length: 256 characters. For example, you can enter
eth0
,eth1
,eth2
, ortun0
. To create a bridge from multiple physical interfaces, enter their names separated by spaces. - Select the Bridge check box to create a bridge from the interfaces specified in the Interface name field. This check box is cleared by default.
- In the Protocol drop-down list, select Static IPv4 address.
- If necessary, select the following check boxes:
- Select theEnable automatically check box to have the network interface enabled automatically simultaneously with the CPE device.
- Select the Force IP, route, and gateway check box to automatically assign a default IP address, route, and gateway to the network interface. The assignment occurs even if there is no connection to the network interface.
By default, all check boxes are selected.
- In the IPv4 address field, enter the IPv4 address of the network interface. You can specify multiple addresses, separating them with spaces.
- In the IPv4 netmask field, enter the IPv4 address mask.
- In the IPv4 gateway field, enter the IP address of the default gateway. The default gateway in the SD-WAN network enables communication between devices from the local and external networks.
- In the IPv4 broadcast field, enter the broadcast address. If you do not specify a value for this setting, it is generated automatically.
- If necessary, add a DNS server:
- Under DNS servers, click + Add.
- In the field that is displayed, enter the IP address of the server.
DNS servers make it possible for network devices to resolve domain names into IP addresses and thus support DNS-reliant applications such as browsers and email. You can add multiple servers.
- In the Override MAC field, enter the MAC address of the network interface. The entered value overrides the default MAC address.
- In the Override MTU field, enter the MTU for the network interface. The entered value overrides the default MTU.
- In the Route metric field, enter
100
if you are creating the first WAN interface. For each subsequent WAN interface, increment the value by 1. For example, for the second WAN interface, enter101
. - Under DHCP server, in the Type drop-down list, select the operating mode of the DHCP server:
- Disabled (selected by default)
- Relay
- Server
- If in the Type drop-down list, you selected Relay, in the DHCP server IP field, enter the IP address of the server.
- If the Type drop-down list, you selectedServer, specify the DHCP server settings:
- In the First IP field, enter the first IP address to be leased to clients. The default setting is
100
. - In the Limit field, enter the maximum number of IP addresses that can be leased to clients. Range of values: 1 to 250. The default setting is
150
. - In the Lease time field, enter the maximum time, in hours, for which an individual IP address can be leased to a client. Range of values: 1 to 250. The value is specified in the format: <number of hours>h. For example, if you want the maximum lease time to be 5 hours, enter
5h
. The default setting is12h
. - If you want to add a DHCP option, under DHCP options, click + Add and in the displayed field, enter the name of the option. Maximum length: 250 characters. You can add multiple options.
- In the First IP field, enter the first IP address to be leased to clients. The default setting is
- Click Create.
The network interface is created and displayed in the table.
- In the upper part of the settings area, click Save to save the configuration of the CPE template.
- In the menu, go to the SD-WAN → CPE templates subsection.
- Creating a network interface with a static IPv6 address on an individual CPE device.
To create a network interface and assign it a static IPv6 address on an individual CPE device:
- In the menu, go to the SD-WAN section.
By default, the CPE subsection is displayed with a table of CPE devices.
- Click the CPE device.
The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button
.
- Select the Network settings tab.
The table of network interfaces is displayed.
- Click + Network interface.
- This opens a window; in that window, in the Alias field, enter an alias that you can reference when creating an SD-WAN interface. Maximum length: 15 characters. The default setting is
eth1
.Enter the value in the format: sdwan<interface number>. For example, if you are creating a network interface that the first SD-WAN interface will be mapped to, enter
sdwan1
. - In the Interface name field, enter the name of the physical interface of the CPE device. Maximum length: 256 characters. For example, you can enter
eth0
,eth1
,eth2
, ortun0
. To create a bridge from multiple physical interfaces, enter their names separated by spaces. - Select the Bridge check box to create a bridge from the interfaces specified in the Interface name field. This check box is cleared by default.
- In the Protocol drop-down list, select Static IPv6 address.
- If necessary, select the following check boxes:
- Select theEnable automatically check box to have the network interface enabled automatically simultaneously with the CPE device.
- Select the Force IP, route, and gateway check box to automatically assign a default IP address, route, and gateway to the network interface. The assignment occurs even if there is no connection to the network interface.
By default, both check boxes are selected.
- In the IPv6 address field, enter the IPv6 address of the network interface. You can specify multiple addresses, separating them with spaces.
- In the IPv6 suffix field, enter the IPv6 suffix of the network interface. Maximum length: 30 characters.
- In the IPv6 gateway field, enter the IP address of the default gateway. The default gateway in the SD-WAN network enables communication between devices from the local and external networks.
- In the Prefix length field, enter the length of the IPv6 prefix. Range of values: 12 to 127.
- In the DHCPv6 sub-prefix length field, enter the length of the DHCPv6 sub-prefix that the network interface must assign to clients. Maximum length: 256 characters.
- In the IPv6 prefix field, enter the IPv6 prefix of the network interface. Maximum length: 30 characters.
- If necessary, add IPv6 prefixes:
- Under IPv6 class, click + Add.
- Enter a class name in the field that is displayed. Maximum length: 256 characters.
The network interface accepts the added prefix classes. You can add multiple classes.
- If necessary, add a DNS server:
- Under DNS servers, click + Add.
- In the field that is displayed, enter the IP address of the server.
DNS servers make it possible for network devices to resolve domain names into IP addresses and thus support DNS-reliant applications such as browsers and email. You can add multiple servers.
- In the Override MAC field, enter the MAC address of the network interface. The entered value overrides the default MAC address.
- In the Override MTU field, enter the MTU for the network interface. The entered value overrides the default MTU.
- In the Route metric field, enter
100
if you are creating the first WAN interface. For each subsequent WAN interface, increment the value by 1. For example, for the second WAN interface, enter101
. - Under DHCP server, in the Type drop-down list, select the operating mode of the DHCP server:
- Disabled (selected by default)
- Relay
- Server
- If in the Type drop-down list, you selected Relay, in the DHCP server IP field, enter the IP address of the server.
- If the Type drop-down list, you selectedServer, specify the DHCP server settings:
- In the First IP field, enter the first IP address to be leased to clients. The default setting is
100
. - In the Limit field, enter the maximum number of IP addresses that can be leased to clients. Range of values: 1 to 250. The default setting is
150
. - In the Lease time field, enter the maximum time, in hours, for which an individual IP address can be leased to a client. Range of values: 1 to 250. The value is specified in the format: <number of hours>h. For example, if you want the maximum lease time to be 5 hours, enter
5h
. The default setting is12h
. - If you want to add a DHCP option, under DHCP options, click + Add and in the displayed field, enter the name of the option. Maximum length: 250 characters. You can add multiple options.
- In the First IP field, enter the first IP address to be leased to clients. The default setting is
- Click Create.
The network interface is created and displayed in the table.
- In the upper part of the settings area, click Save to save the configuration of the CPE device.
- In the menu, go to the SD-WAN section.
- Creating a network interface with a static IPv6 address on all CPE devices that use the CPE template.
To create a network interface and assign it a static IPv6 address on all devices that use the CPE template:
- In the menu, go to the SD-WAN → CPE templates subsection.
A table of CPE templates is displayed.
- Click the CPE template.
The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button
.
- Select the Network settings tab.
The table of network interfaces is displayed.
- Click + Network interface.
- This opens a window; in that window, in the Alias field, enter an alias that you can reference when creating an SD-WAN interface. Maximum length: 15 characters. The default setting is
eth1
.Enter the value in the format: sdwan<interface number>. For example, if you are creating a network interface that the first SD-WAN interface will be mapped to, enter
sdwan1
. - In the Interface name field, enter the name of the physical interface of the CPE device. Maximum length: 256 characters. For example, you can enter
eth0
,eth1
,eth2
, ortun0
. To create a bridge from multiple physical interfaces, enter their names separated by spaces. - Select the Bridge check box to create a bridge from the interfaces specified in the Interface name field. This check box is cleared by default.
- In the Protocol drop-down list, select Static IPv6 address.
- If necessary, select the following check boxes:
- Select theEnable automatically check box to have the network interface enabled automatically simultaneously with the CPE device.
- Select the Force IP, route, and gateway check box to automatically assign a default IP address, route, and gateway to the network interface. The assignment occurs even if there is no connection to the network interface.
By default, both check boxes are selected.
- In the IPv6 address field, enter the IPv6 address of the network interface. You can specify multiple addresses, separating them with spaces.
- In the IPv6 suffix field, enter the IPv6 suffix of the network interface. Maximum length: 30 characters.
- In the IPv6 gateway field, enter the IP address of the default gateway. The default gateway in the SD-WAN network enables communication between devices from the local and external networks.
- In the Prefix length field, enter the length of the IPv6 prefix. Range of values: 12 to 127.
- In the DHCPv6 sub-prefix length field, enter the length of the DHCPv6 sub-prefix that the network interface must assign to clients. Maximum length: 256 characters.
- In the IPv6 prefix field, enter the IPv6 prefix of the network interface. Maximum length: 30 characters.
- If necessary, add IPv6 prefixes:
- Under IPv6 class, click + Add.
- Enter a class name in the field that is displayed. Maximum length: 256 characters.
The network interface accepts the added prefix classes. You can add multiple classes.
- If necessary, add a DNS server:
- Under DNS servers, click + Add.
- In the field that is displayed, enter the IP address of the server.
DNS servers make it possible for network devices to resolve domain names into IP addresses and thus support DNS-reliant applications such as browsers and email. You can add multiple servers.
- In the Override MAC field, enter the MAC address of the network interface. The entered value overrides the default MAC address.
- In the Override MTU field, enter the MTU for the network interface. The entered value overrides the default MTU.
- In the Route metric field, enter
100
if you are creating the first WAN interface. For each subsequent WAN interface, increment the value by 1. For example, for the second WAN interface, enter101
. - Under DHCP server, in the Type drop-down list, select the operating mode of the DHCP server:
- Disabled (selected by default)
- Relay
- Server
- If in the Type drop-down list, you selected Relay, in the DHCP server IP field, enter the IP address of the server.
- If the Type drop-down list, you selectedServer, specify the DHCP server settings:
- In the First IP field, enter the first IP address to be leased to clients. The default setting is
100
. - In the Limit field, enter the maximum number of IP addresses that can be leased to clients. Range of values: 1 to 250. The default setting is
150
. - In the Lease time field, enter the maximum time, in hours, for which an individual IP address can be leased to a client. Range of values: 1 to 250. The value is specified in the format: <number of hours>h. For example, if you want the maximum lease time to be 5 hours, enter
5h
. The default setting is12h
. - If you want to add a DHCP option, under DHCP options, click + Add and in the displayed field, enter the name of the option. Maximum length: 250 characters. You can add multiple options.
- In the First IP field, enter the first IP address to be leased to clients. The default setting is
- Click Create.
The network interface is created and displayed in the table.
- In the upper part of the settings area, click Save to save the configuration of the CPE template.
- In the menu, go to the SD-WAN → CPE templates subsection.
- Creating a network interface for connecting to a wireless network on an individual CPE device.
To create a network interface for connecting to a wireless network on an individual CPE device:
- In the menu, go to the SD-WAN section.
By default, the CPE subsection is displayed with a table of CPE devices.
- Click the CPE device.
The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button
.
- Select the Network settings tab.
The table of network interfaces is displayed.
- Click + Network interface.
- This opens a window; in that window, in the Alias field, enter an alias that you can reference when creating an SD-WAN interface. Maximum length: 15 characters. The default setting is
eth1
.Enter the value in the format: sdwan<interface number>. For example, if you are creating a network interface that the first SD-WAN interface will be mapped to, enter
sdwan1
. - In the Protocol drop-down list, select QMI.
- In the QMI name field, enter the name of the modem used for connecting to the network. Maximum length: 30 characters. For example, you can enter
/dev/cdc-wdm0
. - In the APN field, enter the APN ID of the service provider that issued the SIM card installed in the modem. Maximum length: 30 characters.
- In the Authentication type drop-down list, select which authentication is used on the network interface:
- PAP (Password Authentication Protocol). The client sends credentials to the authentication server as plain text. The server searches its database for the received credentials and, if a match is found, grants access to the client.
- CHAP (Challenge-Handshake Authentication Protocol). The client receives a random string from the authentication server, combines it with the password and applies a one-way hash function to the combination to generate a response. The server receives the response, performs the same operations and, if the generated responses match, grants access to the client.
- PAP and CHAPmeans that both types of authentication are used on the network interface.
- Nonemeans that authentication is not used on the network interface.
- In the Login for PAP/CHAP authentication field, enter the user name for PAP/CHAP authentication. Maximum length: 30 characters. If you do not want to use authentication, do not specify a value for this setting.
- In the Password for PAP/CHAP authentication field, enter the password for PAP/CHAP authentication. Maximum length: 30 characters. If you do not want to use authentication, do not specify a value for this setting.
- In the PIN code field, enter the PIN code of the SIM card installed in the modem. Maximum length: 4 digits.
In the Delay field, enter the length of time (in seconds) that must elapse before communication between the network interface and the modem starts. Maximum value: 30. This setting is used when the modem takes too long to start.
- If necessary, add the network mode that you want to use on the network interface:
- Under Modes, click + Add.
- In the drop-down list, select one of the following values:
- All (use all available network modes).
- LTE.
- UMTS.
- GSM.
- CDMA.
- TD-SCDMA.
You can add multiple modes.
- In the Connection profile field, enter the connection profile index that the network interface must use instead of the APN ID. Maximum length: 30 characters.
- In the IP stack drop-down list, select which IP stack is used on the network interface:
- IPv4 to use the IPv4 protocol stack on the network interface. This is the default setting.
- IPV6 to use the IPv6 protocol stack on the network interface.
- Dual stack (IPv4 and IPv6) to use IPv4 and IPv6 dual stack on the network interface.
- Select the IPv4 over DHCP check box to assign an IPv4 address to the network interface via DHCP. To select this check box simultaneously with the IPv6 over DHCP check box, select Dual stack (IPv4 and IPv6) (for dual stack) in the IP stack drop-down list. This check box is selected by default.
- Select the IPv6 over DHCP check box to assign an IPv6 address to the network interface via DHCP. To select this check box simultaneously with the IPv4 over DHCP check box, select Dual stack (IPv4 and IPv6) in the IP stack drop-down list. This check box is cleared by default.
- Select the Autoconnect check box to automatically connect the modem to the network. This check box is selected by default.
- In the PLMN field, enter the PLMN ID of the service provider. The first three digits of the PLMN ID are the country code, and the next three digits are the mobile network code.
- In the Timeout field, enter the time in seconds for the network interface to wait for the completion of the SIM card operations on the modem. Maximum value: 20. The default setting is
10
. - In the Serial field, enter the serial port of the modem. Maximum length: 50 characters.
- In the Route metric field, enter
100
if you are creating the first WAN interface. For each subsequent WAN interface, increment the value by 1. For example, for the second WAN interface, enter101
. - Click Create.
The network interface is created and displayed in the table.
- In the upper part of the settings area, click Save to save the configuration of the CPE device.
- In the menu, go to the SD-WAN section.
- Creating a network interface for connecting to a wireless network on all devices that use the CPE template.
To create a network interface for connecting to a wireless network on all devices that use the CPE template:
- In the menu, go to the SD-WAN → CPE templates subsection.
A table of CPE templates is displayed.
- Click the CPE template.
The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button
.
- Select the Network settings tab.
The table of network interfaces is displayed.
- Click + Network interface.
- This opens a window; in that window, in the Alias field, enter an alias that you can reference when creating an SD-WAN interface. Maximum length: 15 characters. The default setting is
eth1
.Enter the value in the format: sdwan<interface number>. For example, if you are creating a network interface that the first SD-WAN interface will be mapped to, enter
sdwan1
. - In the Protocol drop-down list, select QMI.
- In the QMI name field, enter the name of the modem used for connecting to the network. Maximum length: 30 characters. For example, you can enter
/dev/cdc-wdm0
. - In the APN field, enter the APN ID of the service provider that issued the SIM card installed in the modem. Maximum length: 30 characters.
- In the Authentication type drop-down list, select which authentication is used on the network interface:
- PAP (Password Authentication Protocol). The client sends credentials to the authentication server as plain text. The server searches its database for the received credentials and, if a match is found, grants access to the client.
- CHAP (Challenge-Handshake Authentication Protocol). The client receives a random string from the authentication server, combines it with the password and applies a one-way hash function to the combination to generate a response. The server receives the response, performs the same operations and, if the generated responses match, grants access to the client.
- PAP and CHAPmeans that both types of authentication are used on the network interface.
- Nonemeans that authentication is not used on the network interface.
- In the Login for PAP/CHAP authentication field, enter the user name for PAP/CHAP authentication. Maximum length: 30 characters. If you do not want to use authentication, do not specify a value for this setting.
- In the Password for PAP/CHAP authentication field, enter the password for PAP/CHAP authentication. Maximum length: 30 characters. If you do not want to use authentication, do not specify a value for this setting.
- In the PIN code field, enter the PIN code of the SIM card installed in the modem. Maximum length: 4 digits.
In the Delay field, enter the length of time (in seconds) that must elapse before communication between the network interface and the modem starts. Maximum value: 30. This setting is used when the modem takes too long to start.
- If necessary, add the network mode that you want to use on the network interface:
- Under Modes, click + Add.
- In the drop-down list, select one of the following values:
- All (use all available network modes).
- LTE.
- UMTS.
- GSM.
- CDMA.
- TD-SCDMA.
You can add multiple modes.
- In the Connection profile field, enter the connection profile index that the network interface must use instead of the APN ID. Maximum length: 30 characters.
- In the IP stack drop-down list, select which IP stack is used on the network interface:
- IPv4 to use the IPv4 protocol stack on the network interface. This is the default setting.
- IPV6 to use the IPv6 protocol stack on the network interface.
- Dual stack (IPv4 and IPv6) to use IPv4 and IPv6 dual stack on the network interface.
- Select the IPv4 over DHCP check box to assign an IPv4 address to the network interface via DHCP. To select this check box simultaneously with the IPv6 over DHCP check box, select Dual stack (IPv4 and IPv6) (for dual stack) in the IP stack drop-down list. This check box is selected by default.
- Select the IPv6 over DHCP check box to assign an IPv6 address to the network interface via DHCP. To select this check box simultaneously with the IPv4 over DHCP check box, select Dual stack (IPv4 and IPv6) in the IP stack drop-down list. This check box is cleared by default.
- Select the Autoconnect check box to automatically connect the modem to the network. This check box is selected by default.
- In the PLMN field, enter the PLMN ID of the service provider. The first three digits of the PLMN ID are the country code, and the next three digits are the mobile network code.
- In the Timeout field, enter the time in seconds for the network interface to wait for the completion of the SIM card operations on the modem. Maximum value: 20. The default setting is
10
. - In the Serial field, enter the serial port of the modem. Maximum length: 50 characters.
- In the Route metric field, enter
100
if you are creating the first WAN interface. For each subsequent WAN interface, increment the value by 1. For example, for the second WAN interface, enter101
. - Click Create.
The network interface is created and displayed in the table.
- In the upper part of the settings area, click Save to save the configuration of the CPE template.
- In the menu, go to the SD-WAN → CPE templates subsection.