Multitenancy

You can deploy Kaspersky SD-WAN for multiple tenants which can be independent clients or offices or departments of your organization. A solution deployed for a tenant is referred to as an SD-WAN instance. After deploying the solution, you need to create at least one tenant and deploy an SD-WAN instance for it.

When you create a tenant, the tenant gets its own self-service portal for managing the SD-WAN instance. The created tenants are isolated so they cannot access each other's self-service portals and their IP networks may overlap. The number of created tenants must not exceed the number of tenants that you specified in the external section of the configuration file when deploying the solution.

To deploy an SD-WAN instance for a tenant, you need to create an SD-WAN instance template. In the SD-WAN instance template, you must specify the basic settings of the SD-WAN instance, such as quality of service and transport service settings. You also need to add the tenant to the SD-WAN instance template to have the SD-WAN instance template settings applied to the SD-WAN instance when you deploy the SD-WAN instance for that tenant.

If the tenant has not been added to any SD-WAN instance template, the Default SD-WAN template is used when deploying an SD-WAN instance for that tenant. You can assign a different SD-WAN instance template as the default.

If the settings that you specified in the SD-WAN instance template do not match the actual parameters of the SD-WAN instance, that SD-WAN instance is not deployed for the tenant. For example, an SD-WAN instance is not deployed if the number of controller nodes specified in the SD-WAN instance template does not match the actual number of controller nodes of the SD-WAN instance.

After deploying the SD-WAN instance, you can view the monitoring results and service requests of that SD-WAN instance. You can also add tenants to a deployed SD-WAN instance to let them use the controller of that SD-WAN instance. This avoids the need to deploy a separate SD-WAN instance for each tenant.

You can group SD-WAN instances into SD-WAN instance pools for load balancing when a large number of CPEs are used. You can add CPE devices to an SD-WAN instance pool. If you have added a CPE device to an SD-WAN instance pool, the orchestrator automatically selects the SD-WAN instance with the lowest number of CPE devices and adds the CPE device to that SD-WAN instance. If SD-WAN instances in the SD-WAN instance pool have the same number of CPE devices, the orchestrator adds the CPE device to a randomly selected SD-WAN instance.

Scenario: Deploying an SD-WAN instance for a tenant

The SD-WAN instance deployment scenario for a tenant involves the following steps:

1. Creating a tenant

   Create the tenant for which you want to deploy an SD-WAN instance.

2. Creating an SD-WAN instance template

   Create and configure an SD-WAN instance template. For a description of the SD-WAN instance template tabs, see the Managing SD-WAN instance templates section. You can use the created SD-WAN instance template to deploy other SD-WAN instances.

3. Adding a tenant to an SD-WAN instance template

   Add the tenant to the SD-WAN instance template to have the SD-WAN instance template settings applied to the SD-WAN instance when you deploy the SD-WAN instance for that tenant.

4. Preparing virtual machines for controller deployment

   While deploying Kaspersky SD-WAN, you prepared virtual machines for deployment of all solution components, including the controller.

   If you have not prepared virtual machines for the controller, you can specify them in the nodes section of the configuration file, and then run the solution deployment command again. When you run the solution deployment command again, the missing virtual machines are prepared. Solution components that are already deployed are not affected.

5. Preparing the PNF package of the controller

   Prepare the PNF package of the SD-WAN instance controller on your local device:

   1. Extract the installation archive and go to one of the following directories:
      • If you want to deploy a single controller node, go to the /pnfs/pnf_sdwan_ctl directory.
      • If you want to deploy three controller nodes, go to the /pnfs/pnf_sdwan_ctl_3 directory.
      • If you want to deploy five controller nodes, go to the /pnfs/pnf_sdwan_ctl_5 directory.
   2. If you want to change the PNF descriptor of the controller, go to the /src directory of the extracted installation archive and edit the pnfd.xml file.
   3. Create the PNF package by running the following command:

      make

   The PNF package is placed in the /build directory of the extracted installation archive.

6. Uploading the PNF package of the controller to the orchestrator web interface

   Upload the PNF package of the SD-WAN instance controller to the orchestrator web interface.

7. Configuring the controller PNF

   Configure the controller PNF of the SD-WAN instance:

   1. In the menu, go to the Catalog section and in the Catalog pane, click the controller PNF.
   2. In the displayed settings area, select the DC placement tab and in the Data center field, specify the added data center in which you want to deploy the controller.
   3. Select the Management IP tab and specify the IP addresses of the controller nodes. Specify standard or virtual IP addresses of virtual machines for controller deployment that you specified in the nodes section of the configuration file when you deployed the solution.
8. Assigning the controller PNF to the tenant

   Assign the controller PNF of the SD-WAN instance to the tenant.

9. Logging in to the tenant self-service portal

   Log in to the tenant self-service portal

10. Creating an SD-WAN network service

    Create an SD-WAN network service. When creating the SD-WAN network service, you need to add the controller PNF of the SD-WAN instance to the topology, and then do the following:

    1. In the topology, click the PNF of the controller.
    2. In the displayed settings area, select the Orchestrator tab, and in the Orchestrator's API IP field, enter the IP address of one of the orchestrator nodes. You need to specify one of the standard or virtual IP addresses of the virtual machines for orchestrator deployment that you specified in the nodes section of the configuration file.
    3. Select the CTL1–5 tabs and enter the controller node information:
       1. In the IP for ORC connection field, enter the IP address of the controller node for connecting the orchestrator. You need to specify one of the standard or virtual IP addresses of the virtual machines for controller deployment that you specified in the nodes section of the configuration file.
       2. In the IP for CPE connections field, enter the IP address of the controller node for connecting CPE devices.
       3. In the PORT for CPE connections field, enter the port of the controller node for connecting CPE devices.

    You can override the IP address and port number of the controller for connecting a CPE device.

11. Deploying the SD-WAN network service

    Deploy the SD-WAN network service.

The SD-WAN instance is deployed for the tenant, and the SD-WAN instance controller is displayed on the administrator portal and the tenant self-service portal in the Infrastructure section.

Managing tenants

The list of tenants is displayed in the Tenants section. This section also displays the following groups of settings:

• VIM allows assigning a VIM to a tenant. A tenant can manage virtual network functions within the virtual infrastructure using the assigned VIMs.
• User groups allows assigning LDAP user groups to a tenant. Assigned LDAP user group can log in to the tenant's self-service portal and manage the SD-WAN instance deployed for the tenant.
• Catalog allows assigning network service components to the tenant. A tenant can manage network services using the assigned network service components.
• SD-WAN service allows viewing SD-WAN network service components of a tenant.
• Resources allows assigning computation resources to a tenant. The assigned computation resources determine the performance of the SD-WAN instance that will be deployed for the tenant. The amount of available computation resources is determined during solution deployment.
• Service requests allows viewing service requests for a tenant.
• Users allows assigning users to a tenant. Assigned users can log in to the tenant's self-service portal and manage the SD-WAN instance deployed for the tenant.
• CPEs allows adding a CPE device to a tenant. The tenant can relay traffic between locations using the added CPE devices.

Creating a tenant

The number of created tenants must not exceed the number of tenants that you specified in the external section of the configuration file when deploying the solution.

To create a tenant:

1. In the menu, go to the Tenants section.

   The tenant management page is displayed.

2. Start creating the tenant in one of the following ways:
   • If you are creating the first tenant, under Tenants, in the Name field, enter the name of the tenant.
   • If you are creating the second or subsequent tenants, in the upper part of the Tenants section, click + Tenant, and in the Name field, enter the name of the tenant.
3. If necessary, in the relevant area in the lower part of the page, enter a brief description of the tenant.
4. Click the create icon .

The tenant is created and displayed under Tenants.

Assigning a user to a tenant

You can assign a user to a tenant to allow the user to log in to the tenant's self-service portal and manage the SD-WAN instance that is deployed for the tenant. To assign a user to a tenant, you need to assign tenant role to the user while creating or editing the user.

To assign a user to a tenant:

1. In the menu, go to the Tenants section.

   The tenant management page is displayed.

2. Under Tenants, select the tenant to which you want to assign a user.
3. Under Users, click + Edit.
4. This opens a window; in that window, under Users, select a user which you want to assign to the tenant.
5. Click Save.

The user is assigned to the tenant and displayed under Users.

Assigning an LDAP user group to a tenant

You can assign an LDAP user group to a tenant to allow this LDAP user group to log in to the tenant's self-service portal and manage the SD-WAN instance that is deployed for the tenant. To assign an LDAP user group to a tenant, you must assign the LDAP user group the tenant role when you create or edit the LDAP user group.

To assign an LDAP user group to a tenant:

1. In the menu, go to the Tenants section.

   The tenant management page is displayed.

2. Under Tenants, select the tenant to which you want to assign a user group.
3. Under User groups, click + Edit.
4. This opens a window; in that window, under Groups, select an LDAP user group which you want to assign to the tenant.
5. Click Save.

The LDAP user group is assigned to the tenant and displayed under User groups.

Assigning compute resources to a tenant

You can assign computation resources to a tenant to set up the performance of the SD-WAN instance that you want to deploy for the tenant. The amount of available computation resources is determined during solution deployment.

To assign compute resources to a tenant:

1. In the menu, go to the Tenants section.

   The tenant management page is displayed.

2. Under Tenants, select the tenant to which you want to assign compute resources.
3. In the upper part of the Resources section, click the settings icon .
4. Click the resize icon ∞ next to one of the following computation resources:
5. In the displayed field, enter the amount of compute resource that you want to assign to the tenant.
6. Click the save icon .

The specified amount of compute resources is assigned to the tenant.

Assigning network service components to a tenant

You can assign network service components to a tenant to let the tenant use them to manage network services.

To assign network service components to a tenant:

1. In the menu, go to the Tenants section.

   The tenant management page is displayed.

2. Under Tenants, select the tenant to which you want to assign network service components.
3. Under Catalog, select check boxes next to the network service components that you want to assign to the tenant.

The network service components are assigned to the tenant and displayed in the tenant self-service portal in the Catalog section.

Assigning a VIM to a tenant

You can assign a VIM to a tenant to let the tenant use this VIM to manage virtual network functions within the virtual infrastructure.

To assign a VIM to a tenant:

1. In the menu, go to the Tenants section.

   The tenant management page is displayed.

2. Under Tenants, select the tenant to which you want to assign a VIM.
3. Under VIM, click + Edit.
4. This opens a window; in that window, under Domain andData center, select the created domain, then select the added data center in which you have deployed VIM.
5. Under VIM, select the VIM that you want to assign to the tenant.

   The VIM is displayed under Assign VIMs.

6. Click Save.

The VIM is assigned to the tenant and displayed under VIM.

Logging in to the tenant self-service portal

To log in to the tenant self-service portal:

1. In the menu, go to the Tenants section.

   The tenant management page is displayed.

2. Under Tenants, select the tenant whose self-service portal you want to log in to.
3. Click Connect as tenant.

This opens the tenant self-service portal in a new browser tab. You are logged in to the self-service portal.

Editing a tenant

To edit a tenant:

1. In the menu, go to the Tenants section.

   The tenant management page is displayed.

2. In the Tenants section, click the settings icon → Edit next to the tenant that you want to edit.
3. If necessary, edit the name and/or brief description of the tenant.
4. Click the save icon .

The tenant is modified and updated under Tenants.

Deleting a tenant

When you delete a tenant, the SD-WAN instance deployed for it is automatically deleted, as well as the CPE devices that were added to the tenant.

Deleted tenants cannot be restored.

To delete a tenant:

1. In the menu, go to the Tenants section.

   The tenant management page is displayed.

2. In the Tenants section, click the settings icon → Delete next to the tenant that you want to delete.
3. In the confirmation window, click Delete.

The tenant is deleted and is no longer displayed under Tenants.

Managing SD-WAN instance templates

The SD-WAN instance templates table is displayed in the SD-WAN → SD-WAN instance templates section. Default SD-WAN template is the SD-WAN instance template that is created by default. Information about SD-WAN instance templates is displayed in the following table columns:

• ID is the ID of the SD-WAN instance template.
• Name is the name of the SD-WAN instance template.
• Used specifies whether the SD-WAN instance template is being used by SD-WAN instances:
  • Yes
  • No
• Updated is the date and time when the SD-WAN instance template settings were last modified.
• User is the name of the user that created the SD-WAN instance template.

The actions that you can perform with the table are described in the Managing solution component tables instructions.

The SD-WAN instance template settings are displayed on the following tabs:

• Information contains basic information about the SD-WAN instance template. You can edit the name of the SD-WAN template in the Name field.
• Traffic classes contains settings of traffic classes.
• Traffic classifiers contains settings of traffic classifiers.
• QoS rules contains settings of quality of service rules.
• Transport services contains settings of transport services.
• Tenants contains tenants that have been added to the SD-WAN instance template.
• High availability is the number of controller nodes of the SD-WAN instance.
• Transport/service strategy is the transport strategy used in the SD-WAN instance.

Creating an SD-WAN instance template

To create an SD-WAN instance template:

1. In the menu, go to the SD-WAN → SD-WAN instance templates section.

   A table of SD-WAN instance templates is displayed.

2. In the upper part of the page, click + SD-WAN instance template.
3. This opens a window; in that window, enter the name of the SD-WAN instance template.
4. Click Create.

The SD-WAN instance template is created and displayed in the table.

You need to configure the created SD-WAN instance template. In the SD-WAN instance template, you must specify the basic settings of the SD-WAN instance, such as quality of service and transport service settings. You also need to add the tenant to the SD-WAN instance template to have the SD-WAN instance template settings applied to the SD-WAN instance when you deploy the SD-WAN instance for that tenant. For a description of tabs, see the Managing SD-WAN instance templates section.

Setting the default SD-WAN instance template

If the tenant has not been added to any SD-WAN instance template, the Default SD-WAN template is used when deploying an SD-WAN instance for that tenant. You can assign a different SD-WAN instance template as the default.

To set the default SD-WAN instance template:

1. In the menu, go to the SD-WAN → SD-WAN instance templates section.

   A table of SD-WAN instance templates is displayed.

2. Click the SD-WAN instance template that you want to make the default SD-WAN instance template.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Information tab is selected, which displays the name of the SD-WAN instance template.

3. In the upper part of the settings area, under Actions, click Set as default template.

The SD-WAN instance template becomes the default SD-WAN instance template.

Selecting the number of controller nodes for an SD-WAN instance

An SD-WAN instance is not deployed if the number of controller nodes specified in the SD-WAN instance template does not match the actual number of controller nodes of the SD-WAN instance.

To select the number of SD-WAN instance controller nodes:

1. In the menu, go to the SD-WAN → SD-WAN instance templates section.

   A table of SD-WAN instance templates is displayed.

2. Click the SD-WAN instance template for which you want to select the number of controller nodes.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Information tab is selected, which displays the name of the SD-WAN instance template.

3. Select the High availability tab.
4. Select the number of controller nodes
5. In the upper part of the settings area, click Save to save the settings of the SD-WAN instance template.

Adding a tenant to an SD-WAN instance template

You need to add the tenant to the SD-WAN instance template to have the SD-WAN instance template settings applied to the SD-WAN instance when you deploy the SD-WAN instance for that tenant.

To add a tenant to an SD-WAN instance template:

1. In the menu, go to the SD-WAN → SD-WAN instance templates section.

   A table of SD-WAN instance templates is displayed.

2. Click the SD-WAN instance template into which you want to add a tenant.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Information tab is selected, which displays the name of the SD-WAN instance template.

3. Select the Tenants tab.

   A table of tenants is displayed.

4. Click + Tenant.
5. This opens a window; in that window, select the created tenant that you want to add to the SD-WAN instance template.
6. Click Add.

   The tenant is added to the SD-WAN instance template and is displayed in the table.

7. In the upper part of the settings area, click Save to save the settings of the SD-WAN instance template.

Removing a tenant from an SD-WAN instance template

You can remove a tenant from an SD-WAN instance template; if you do so, this SD-WAN instance template will not be used in SD-WAN instance deployment for the tenant.

To remove a tenant from an SD-WAN instance template:

1. In the menu, go to the SD-WAN → SD-WAN instance templates section.

   A table of SD-WAN instance templates is displayed.

2. Click the SD-WAN instance template from which you want to remove a tenant.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Information tab is selected, which displays the name of the SD-WAN instance template.

3. Select the Tenants tab.

   A table of tenants is displayed.

4. Click Delete next to the tenant that you want to remove from the SD-WAN instance template.

   The tenant is removed from the SD-WAN instance template and is no longer displayed in the table.

5. In the upper part of the settings area, click Save to save the settings of the SD-WAN instance template.

Deleting an SD-WAN instance template

You cannot delete the default SD-WAN instance template.

Deleted SD-WAN instance templates cannot be restored.

To delete an SD-WAN instance template:

1. In the menu, go to the SD-WAN → SD-WAN instance templates section.

   A table of SD-WAN instance templates is displayed.

2. Click the SD-WAN instance template that you want to delete.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Information tab is selected, which displays the name of the SD-WAN instance template.

3. In the upper part of the settings area, under Actions, click Delete.
4. In the confirmation window, click Delete.

The SD-WAN instance template is deleted and is no longer displayed in the table.

Working with SD-WAN instances

The table of SD-WAN instances is displayed in the SD-WAN → SD-WAN instances section. Information about SD-WAN instances is displayed in the following table columns:

• ID is the ID of the SD-WAN instance.
• Tenant is the tenant for which the SD-WAN instance is deployed.
• Status is the status of the SD-WAN instance:
  • Ok means the SD-WAN instance is operating normally.
  • Controller is absent means the SD-WAN instance does not have a controller.
  • Error means an error occurred during the operation of the SD-WAN instance.
  • Deleting means the SD-WAN instance is in the process of being deleted.
  • Deleted means the SD-WAN instance was deleted.
• # of CPEs is the number of CPE devices that have been added to the SD-WAN instance.
• Controllers are IP addresses and port numbers of controllers of the SD-WAN instance.
• DC is the data center in which SD-WAN instance is deployed.
• VIM is the VIM of the SD-WAN instance.
• Created is the date and time when the SD-WAN instance was deployed.

The actions that you can perform with the table are described in the Managing solution component tables instructions.

The SD-WAN instance settings are displayed on the following tabs:

• Configuration contains basic information about the SD-WAN instance.
• Monitoring contains SD-WAN instance monitoring results.
• Service requests contains service requests of the SD-WAN instance.
• Tenant self-service contains tenants that have been added to the SD-WAN instance.

Configuring controller nodes of an SD-WAN instance

When configuring controller nodes of the SD-WAN instance, you can change their IP addresses and TCP port numbers. This automatically changes the IP addresses and TCP port numbers of controller nodes on all CPE devices that are added to the SD-WAN instance. If SD-WAN interfaces of the WAN type of the CPE device are connected to different networks, for example, the internet and a private MPLS network, you can change the IP addresses and TCP port numbers of controller nodes on individual SD-WAN interfaces of the WAN type when you create or edit SD-WAN interfaces of the WAN type. The IP addresses and TCP port numbers specified on the SD-WAN interface of the WAN type take precedence over the IP addresses and TCP port numbers specified when configuring the controller nodes of the SD-WAN instance.

If you deployed multiple controller nodes when you deployed the SD-WAN instance, you can specify which controller node is the arbiter node while configuring the controller nodes of the SD-WAN instance. When an arbiter node is specified in the orchestrator web interface, CPE devices do not establish management sessions with that controller node, which reduces the load on the CPE devices.

After configuring the controller nodes of the SD-WAN instance, to apply the changes, you must restart the CPE devices that already have been registered.

To configure controller nodes of an SD-WAN instance:

1. In the menu, go to the SD-WAN → SD-WAN instances section.

   A table of SD-WAN instances is displayed.

2. Click the SD-WAN instance whose controller nodes you want to configure.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Configuration tab is selected, which displays general information about the SD-WAN instance.

3. If necessary, do one of the following:
   • If you want to change the IP address of a controller node, in the IP address field, enter an IPv4 address. The number of fields corresponds to the number of controller nodes.
   • If you want to change the TCP port number of a controller node, in the Port field, enter the number of the base port. Range of values: 1 to 65,535. Default value: 6653. The number of fields corresponds to the number of controller nodes.

     Along with the base port of the controller node, ports with the next three consecutive numbers are automatically specified. For example, if you enter the 6653 as the base port number, ports 6654, 6655, and 6656 are automatically specified.

   • If you want to specify an arbiter node, select the Arbiter check box next to the controller node. You cannot specify an arbiter node if you deployed only one controller node while deploying the SD-WAN instance.
4. In the upper part of the settings area, click Save to save the settings of the SD-WAN instance.

Viewing the usage of an SD-WAN instance

You can see which CPE devices have been added to the SD-WAN instance.

To view the usage of an SD-WAN instance:

1. In the menu, go to the SD-WAN → SD-WAN instances section.

   A table of SD-WAN instances is displayed.

2. Click the SD-WAN instance for which you want to view its usage.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Configuration tab is selected, which displays general information about the SD-WAN instance.

3. In the upper part of the settings area, under Actions, click Show associated CPEs.

This opens the CPE section which displays a table of CPE devices added to the SD-WAN instance.

Viewing the topology of an SD-WAN instance

To view the topology of an SD-WAN instance:

1. Log in to the self-service portal of the tenant for which the SD-WAN instance is deployed.
2. In the menu, go to the Infrastructure section.

   This opens the resource management page. By default, the Network resources tab is selected, which displays the table of controllers.

3. Click Management → Configuration menu next to the controller.
4. Go to the Topology section.

   The topology of the SD-WAN instance is displayed.

5. If necessary, select the following check boxes:
   • Select the Tunnel utilization check box to display the utilization of the links. The utilization level of the link is represented by the following colors:
     • Green — Low link utilization.
     • Yellow — Medium link utilization.
     • Red — High link utilization.
   • Select the Segments check box and in the Segment switches drop-down list, select two CPE devices to display all links between those devices.
   • Select the Name check box to display the names of CPE devices.
   • Select the IP address check box to display the IP addresses of CPE devices.

   By default, all check boxes are cleared.

Adding a tenant to an SD-WAN instance

If you want to use the controller of a single SD-WAN instance for multiple tenants, you need to add tenants to that SD-WAN instance. Using a single SD-WAN instance controller for multiple tenants eliminates the need to deploy a separate SD-WAN instance for each tenant.

To add a tenant to an SD-WAN instance:

1. In the menu, go to the SD-WAN → SD-WAN instances section.

   A table of SD-WAN instances is displayed.

2. Click the SD-WAN instance into which you want to add a tenant.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Configuration tab is selected, which displays general information about the SD-WAN instance.

3. Select the Tenant self-service tab.

   A table of tenants is displayed.

4. Click + Add.
5. This opens a window; in that window, select the created tenant that you want to add to the SD-WAN instance.
6. In the Maximum CPEs field, enter the maximum number of CPE devices available to the tenant.
7. Click Add.

The tenant is added to the SD-WAN instance and is displayed in the table.

Removing a tenant from an SD-WAN instance

You can remove a tenant that has been added to an SD-WAN instance to prevent the tenant from using the controller of that SD-WAN instance.

To remove a tenant from an SD-WAN instance:

1. In the menu, go to the SD-WAN → SD-WAN instances section.

   A table of SD-WAN instances is displayed.

2. Click the SD-WAN instance from which you want to remove a tenant.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Configuration tab is selected, which displays general information about the SD-WAN instance.

3. Select the Tenant self-service tab.

   A table of tenants is displayed.

4. Click Delete next to the tenant that you want to remove from the SD-WAN instance.
5. In the confirmation window, click Delete.

The tenant is deleted from the SD-WAN instance and is no longer displayed in the table.

Deleting an SD-WAN instance

When you delete an SD-WAN instance, the CPE devices that have been added to it and the SD-WAN network service deployed for the SD-WAN instance are also automatically deleted. However, the tenant for which the SD-WAN instance is deployed is not deleted. An alternative way of deleting an SD-WAN instance is to delete the SD-WAN network service.

Deleted SD-WAN instances cannot be restored.

To delete an SD-WAN instance:

1. In the menu, go to the SD-WAN → SD-WAN instances section.

   A table of SD-WAN instances is displayed.

2. Click the SD-WAN instance that you want to delete.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Configuration tab is selected, which displays general information about the SD-WAN instance.

3. In the upper part of the settings area, under Actions, click Delete.
4. In the confirmation window, click Delete.

The SD-WAN instance is deleted and is no longer displayed in the table.

Managing SD-WAN instance pools

The table of SD-WAN instance pools is displayed in the SD-WAN → SD-WAN instance pools section. Information about SD-WAN instance pools is displayed in the following table columns:

• ID is the ID of the SD-WAN instance pool.
• Name is the name of the SD-WAN instance pool.
• Number of instances is the number of SD-WAN instances in the SD-WAN instance pool.
• # of CPEs is the number of CPE devices that have been added to the SD-WAN instances.
• Created is the date and time when the SD-WAN instance pool was created.

The actions that you can perform with the table are described in the Managing solution component tables instructions.

The SD-WAN instance pool settings are displayed on the following tabs:

• Information contains basic information about the SD-WAN instance pool. You can rename the SD-WAN instance pool in the Name field and enter a brief description in the Description field.
• SD-WAN instances contains SD-WAN instances that have been added to the SD-WAN instance pool.

Creating a pool of SD-WAN instances

To create a pool of SD-WAN instances:

1. In the menu, go to the SD-WAN → SD-WAN instance pools section.

   A table of SD-WAN instance pools is displayed.

2. In the upper part of the page, click + SD-WAN instance pool.
3. This opens a window; in that window, enter the name of the SD-WAN instance pool.
4. Click Create.

The SD-WAN instance pool is created and displayed in the table.

You need to add SD-WAN instances to the created SD-WAN instance pool.

Adding an SD-WAN instance to an SD-WAN instance pool

To add an SD-WAN instance to an SD-WAN instance pool:

1. In the menu, go to the SD-WAN → SD-WAN instance pools section.

   A table of SD-WAN instance pools is displayed.

2. Click the SD-WAN instance pool to which you want to add an SD-WAN instance.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Information tab is selected, which displays general information about the SD-WAN instance pool.

3. Select the SD-WAN instances tab.

   A table of SD-WAN instances is displayed.

4. Click + SD-WAN instance.
5. This opens a window; in that window, select the deployed SD-WAN instance that you want to add to the SD-WAN instance pool.
6. Click Add.

   The SD-WAN instance is added to the SD-WAN instance pool and displayed in the table.

7. In the upper part of the settings area, click Save to save the settings of the SD-WAN instance pool.

If you are adding a CPE device to the SD-WAN instance pool, you can add that CPE device to the SD-WAN instance that you added to the SD-WAN instance pool. This happens if the least number of CPE devices have been added to the SD-WAN instance as compared to the other SD-WAN instances in the SD-WAN instance pool.

Removing an SD-WAN instance from an SD-WAN instance pool

To remove an SD-WAN instance from an SD-WAN instance pool:

1. In the menu, go to the SD-WAN → SD-WAN instance pools section.

   A table of SD-WAN instance pools is displayed.

2. Click the SD-WAN instance pool from which you want to remove an SD-WAN instance.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Information tab is selected, which displays general information about the SD-WAN instance pool.

3. Select the SD-WAN instances tab.

   A table of SD-WAN instances is displayed.

4. Click Delete next to the SD-WAN instance that you want to remove from the SD-WAN instance pool.

   The SD-WAN instance is removed from the SD-WAN instance pool and is no longer displayed in the table.

5. In the upper part of the settings area, click Save to save the settings of the SD-WAN instance pool.

Deleting a pool of SD-WAN instances

When you delete an SD-WAN instance pool, all CPE devices added to that SD-WAN instance pool are automatically deleted. This does not delete SD-WAN instances.

Deleted SD-WAN instance pools cannot be restored.

To delete an SD-WAN instance pool:

1. In the menu, go to the SD-WAN → SD-WAN instance pools section.

   A table of SD-WAN instance pools is displayed.

2. Click the SD-WAN instance pool that you want to delete.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Information tab is selected, which displays general information about the SD-WAN instance pool.

3. In the upper part of the settings area, under Actions, click Delete.
4. In the confirmation window, click Delete.

The SD-WAN instance pool is deleted and is no longer displayed in the table.