Kaspersky SD-WAN

Managing CPE devices

The table of CPE devices is displayed in the SD-WAN → CPE section. Information about CPE devices is displayed in the following columns of the table:

• DPID is the DPID of the CPE device.
• S/N is the serial number of the CPE device.
• Model is the model of the CPE device.
• SW version is the firmware version of the CPE device. Outdated firmware is highlighted in orange.
• CPE template is the CPE template used by the CPE device.
• Name is the name of the CPE device.
• Role is the role of the CPE device:
  • CPE
  • Gateway
• Status is the status of the CPE device.
  • Unknown means the CPE device is connected to the orchestrator but is not registered.
  • Waiting means the CPE device has been added in the orchestrator web interface, but it is not connected to the orchestrator.
  • Registering means the CPE device is being registered.
  • Error means an error occurred while registering the CPE device.
  • Registered means the CPE device has been registered successfully.
  • Configuration means scripts are being run on the CPE device.
• State is the state of the CPE device:
  • Enabled means the assigned CPE template has been applied to the CPE device on the orchestrator side. On the controller side, the CPE device can be used to relay traffic.
  • Disabled (in the Waiting status) means the assigned CPE template has not been applied to the CPE device on the orchestrator side. On the controller side, the CPE device cannot be used to relay traffic.
  • Disabled (in the Registered status) means the orchestrator does not respond to REST API requests from the CPE device. On the controller side, the transmission of traffic through links is blocked for the CPE device.
• Connection indicates whether the CPE device is connected to the controller:
  • Connected
  • Disconnected
• Topology tags contains topology tags that have been assigned to the CPE device.
• Fragmentation is the result of checking for fragmentation of traffic packets on the CPE device:
  • Unsupported means the CPE device cannot transmit fragmented packets.
  • Unknown means packet fragmentation cannot be checked on the CPE device.
  • Supported means the device can transmit fragmented packets.
• Usage indicates whether the SD-WAN interfaces of the CPE device are being used by transport services:
  • Yes
  • No
• Transport tenant is the transport tenant to which the CPE device is added. The CPE device connects to the controller of the SD-WAN instance that is deployed for the transport tenant.
• Customer tenant is the customer tenant to which the CPE device is added. The customer tenant can manage the CPE device in its self-service portal.
• Location is the address of the CPE device.
• Management IP is the IP address assigned to the CPE device by the management subnet.
• Controllers are IP addresses and port number of controllers to which the CPE device is connected.
• Gateways are IP addresses and port numbers of gateways to which the CPE device is connected.
• Mobile network is the mobile network to which the CPE device is connected.
• Registered is the date and time when the CPE device was registered.
• Update is the date and time when the CPE device settings were last modified.
• User is the name of the user which created the CPE device.

The actions that you can perform with the table are described in the Managing solution component tables instructions.

CPE device settings are displayed on the following tabs:

• Configuration is the basic information about the CPE device. You can enter a brief description of the CPE device in the Description field and view the tasks being performed by the orchestrator in the Out-of-band management table.
• Monitoring are CPE device monitoring results.
• Problems are problems that occurred while the CPE device was operational. In case of any problems, a red exclamation mark is displayed next to the tab.
• Encryption are the traffic encryption settings.
• Service requests are service requests of the CPE device.
• Tags are tags for grouping CPE devices.
• Scripts are scripts for additional configuration of the CPE device.
• The following tabs are displayed on the SD-WAN settings tab:
  • Global settings contains the connection settings of a CPE device to the orchestrator and controller.
  • Interfaces contains SD-WAN interfaces.
• Topology contains topology tags for establishing links between CPE devices.
• Network settings contains network interfaces.
• Firewall settings are firewall settings.
• VRF contains virtual routing and forwarding tables.
• BGP settings is the BGP protocol for exchanging routes between CPE devices and external network devices. The following tabs are displayed on this tab:
  • General settings contains the basic settings of the BGP protocol.
  • Neighbors contains BGP peers.
  • Peer groups contains BGP peer groups.
• OSPF covers the OSPF protocol for route exchange between CPE devices and external network devices. The following tabs are displayed on this tab:
  • General settings contains basic settings of the OSPF protocol.
  • OSPF areas contains OSPF areas.
  • OSPF interface contains OSPF interfaces.
• Routing filters contains settings for filtering routes and traffic packets between CPE devices and external network devices. The following tabs are displayed on this tab:
  • Access control lists contains access control lists (ACLs).
  • Prefix lists contains prefix lists.
  • Route maps contains route maps.
• BFD settings covers the BFD protocol for detecting routing failures between CPE devices and external network devices.
• Static routes contains static routes.
• Multicast contains settings for transmission of multicast traffic between CPE devices and external network devices using the PIM and IGMP protocols. The following tabs are displayed on this tab:
  • General settings contains basic PIM settings.
  • Interfaces contains multicast interfaces.
• VRRP covers the VRRP protocol for high availability of CPE devices. The following tabs are displayed on this tab:
  • VRRP instances contains VRRP instances.
  • VRRP instance groups contains VRRP instance groups.
• UNIs are UNIs on the CPE device.
• Modems are CPE device modem settings.
• Links contains link settings.
• Multipathing are the path settings.
• Activation are two-factor authentication settings of the CPE device.
• Deactivation are settings for automatically removing and disabling the CPE device.
• Log files contains logging settings.
• NetFlow contains basic NetFlow settings.
• NTP displays NTP servers used for time synchronization.
• Diagnostic information displays requests for CPE device diagnostic information.
• Utilities displays utilities for diagnosing CPE devices.