Traffic encryption on a link

Expand all | Collapse all

You can enable or disable traffic encryption on an individual link. All links built within the SD-WAN network are displayed in the overall table of links in the Tunnels section, as well as in the graphic topology in the Topology section. A table of links built using a particular CPE device is also displayed in the configuration of that CPE device, on the Tunnels tab.

When enabling or disabling traffic encryption on an individual link, you must configure the opposite-direction link in the same way.

To enable or disable traffic encryption on a link, use the following instructions:

• Enabling or disabling traffic encryption on a link using the overall table of links.

  To enable or disable traffic encryption on a link using the overall table of links:

  1. In the menu, go to the Infrastructure section.

     The SD-WAN infrastructure management page is displayed. By default, the Network resources tab is selected, which displays the table of SD-WAN Controllers.

  2. Click Management next to the SD-WAN Controller and in the drop-down list, select Configuration menu.

     This opens the SD-WAN Controller configuration menu. By default, you are taken to the Controller nodes section, which displays a table of Controller nodes.

  3. Go to the Tunnels section.

     A table of links is displayed.

  4. Click Management next to the link and in the drop-down list, select Set encryption.
  5. This opens a window; in that window, select or clear the Override check box to enable or disable encryption of the selected link. This check box is cleared by default.
  6. Select or clear the Enable encryption check box. This check box is cleared by default.
  7. Click Save.
• Enabling or disabling traffic encryption on a link using the graphical topology.

  To enable or disable traffic encryption on a link using the graphical topology:

  1. In the menu, go to the Infrastructure section.

     The SD-WAN infrastructure management page is displayed. By default, the Network resources tab is selected, which displays the table of SD-WAN Controllers.

  2. Click Management next to the SD-WAN Controller and in the drop-down list, select Configuration menu.

     This opens the SD-WAN Controller configuration menu. By default, you are taken to the Controller nodes section, which displays a table of Controller nodes.

  3. Go to the Topology section.

     The SD-WAN topology is displayed.

  4. Click the link to open a window and in that window, click Set encryption.
  5. This opens a window; in that window, select or clear the Override check box to enable or disable encryption of the selected link. This check box is cleared by default.
  6. Select or clear the Enable encryption check box. This check box is cleared by default.
  7. Click Save.
• Enabling or disabling traffic encryption on a link in the configuration of a CPE device.

  To enable or disable traffic encryption on a link in the configuration of a CPE device:

  1. In the menu, go to the SD-WAN section.

     By default, the CPE subsection is displayed with a table of CPE devices.

  2. Click the CPE device.

     The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

  3. Select the Tunnels tab.

     A table of links is displayed.

  4. Click Management next to the link and in the drop-down list, select Set encryption.
  5. This opens a window; in that window, select or clear the Override check box to enable or disable encryption of the selected link. This check box is cleared by default.
  6. Select or clear the Enable encryption check box. This check box is cleared by default.
  7. In the upper part of the settings area, click Save to save the configuration of the CPE device.