Kaspersky SD-WAN
2.2
English

Contents

Managing network interfaces

Network interfaces correspond to ports and virtual interfaces of the CPE device's operating system that connect to the WAN or the LAN. You must map the network interfaces of the CPE device to the OpenFlow ports of the virtual switch using SD-WAN interfaces.

The table of network interfaces is displayed in the CPE template and on the CPE device:

  • To display the table of network interfaces in a CPE template, go to the SD-WAN → CPE templates menu section, click the CPE template, and select the Network settings tab.
  • To display the table of network interfaces on a CPE device, go to the SD-WAN → CPE menu section, click the CPE device, and select the Network settings tab.

Information about network interfaces is displayed in the following columns of the table:

  • Alias is the name of the network interface for mapping the network interface to an OpenFlow port. You specify this name when creating an SD-WAN interface of the WAN type.
  • Inherited indicates whether the network interface is inherited from CPE template:
    • Yes
    • No

    This column is displayed only on the CPE device.

  • Interface name is the name of the physical port or virtual interface of the operating system of the CPE device.
  • Protocol is the method of assigning an IP address to the network interface:
    • DHCP client means the IP address is automatically assigned by DHCP.
    • Static IPv4 address means an IPv4 address is statically assigned.
    • Static IPv6 address means an IPv6 address is statically assigned.
    • QMI means LTE network connection settings are specified manually.
    • PPPoE means the PPPoE server connection settings are specified manually.
    • None means an IP address is not assigned.
  • IP/mask are the IP address, mask, and default gateway of the network interface.
  • Enable automatically indicates whether the network interface is automatically enabled when the CPE device is powered on:

In this section

Creating network interfaces

Editing a network interface

Disabling or enabling a network interface

Canceling network interface settings applied to the CPE device

Deleting a network interface
Page top
[Topic 269960][Topic 269207]

Creating a network interface with automatic assignment of an IP address via DHCP

To create a network interface with automatic assignment of an IP address via DHCP:

  1. Create a network interface in one of the following ways:
    • If you want to create a network interface in a CPE template, go to the SD-WAN → CPE templates section, click the CPE template, and select the Network settings tab.
    • If you want to create a network interface on a CPE device, go to the SD-WAN → CPE section, click the CPE device, and select the Network settings tab.

    The table of network interfaces is displayed.

  2. Click + Network interface.
  3. This opens a window; in that window, in the Alias field, enter the name of the network interface for mapping the network interface to an OpenFlow port. You must specify this alias when creating an SD-WAN interface of the WAN type. Maximum length: 15 characters.
  4. If you want to add a network interface to a firewall zone, in the Zone drop-down list, select the created firewall zone.
  5. In the Interface name field, enter the name of the physical port or virtual interface of the operating system of the CPE device. Maximum length: 256 characters. For example, you can enter eth0, eth1, eth2, or tun0. To create a bridge from multiple interfaces, enter their names separated by spaces.

    If you want to assign an outer VLAN tag to a network interface, enter a period (.) after the physical port or virtual interface name of the operating system, and then enter the outer VLAN tag. For example, you can enter eth2.150.

  6. If you want to create a bridge from physical or virtual interfaces whose names are specified in the Interface name field:
    1. Select the Bridge check box. This check box is cleared by default.
    2. If you want to use STP on the bridge to prevent routing loops, select the STP check box. This check box is cleared by default.
    3. In the Age (sec.) field, enter the duration in seconds for which dynamic records are stored in the MAC table of the bridge. If you want to use the bridge as a hub, enter 0 in this field. Range of values: 0 to 86,400.
  7. If you want to enable the NetFlow protocol on the network interface, select the NetFlow check box. This check box is cleared by default.
  8. In the Protocol drop-down list, select DHCP client.
  9. If you do not want the network interface to be automatically enabled when the the CPE device is enabled, clear the Enable automatically check box. This check box is selected by default.
  10. If you want an IP address, route, and default gateway automatically assigned to the network interface, select the Force IP, route, and gateway check box. This check box is cleared by default.
  11. If you do not want the route obtained via DHCP to be used by network interface by default, clear the Use default route check box. This check box is selected by default.
  12. If necessary, specify a DNS server for the network interface:
    1. Under DNS servers, click + Add.
    2. In the field that is displayed, enter the IP address of the DNS server.

    The DNS server is specified and displayed in the DNS servers section. You can specify multiple DNS servers or delete a DNS server. To delete a DNS server, click the delete icon next to it.

  13. In the Override MAC field, enter the MAC address of the network interface. The entered value replaces the actual MAC address of the network interface.
  14. In the Override MTU field, enter the MTU for the network interface. The entered value overrides the default MTU.
  15. In the Route metric field, enter the default route metric for the network interface. The CPE device uses the default route with the lowest metric. For example, you can specify the following default route metrics for network interfaces:
    • 100 for network interface sdwan0
    • 101 for network interface sdwan1
    • 102 for network interface sdwan2

    In this case, the CPE device uses the default route of the sdwan0 network interface. If the sdwan0 network interface fails, the default route of the sdwan1 network interface is used next, followed by the default route of the sdwan2 network interface.

  16. Click Create.

    The network interface is created and displayed in the table.

  17. In the upper part of the settings area, click Save to save the settings of the CPE template or CPE device.
Page top
[Topic 257984]

Creating a network interface with a static IPv4 address

To create a network interface with a static IPv4 address:

  1. Create a network interface in one of the following ways:
    • If you want to create a network interface in a CPE template, go to the SD-WAN → CPE templates section, click the CPE template, and select the Network settings tab.
    • If you want to create a network interface on a CPE device, go to the SD-WAN → CPE section, click the CPE device, and select the Network settings tab.

    The table of network interfaces is displayed.

  2. Click + Network interface.
  3. This opens a window; in that window, in the Alias field, enter the name of the network interface for mapping the network interface to an OpenFlow port. You must specify this alias when creating an SD-WAN interface of the WAN type. Maximum length: 15 characters.
  4. If you want to add a network interface to a firewall zone, in the Zone drop-down list, select the created firewall zone.
  5. In the Interface name field, enter the name of the physical port or virtual interface of the operating system of the CPE device. Maximum length: 256 characters. For example, you can enter eth0, eth1, eth2, or tun0. To create a bridge from multiple interfaces, enter their names separated by spaces.

    If you want to assign an outer VLAN tag to a network interface, enter a period (.) after the physical port or virtual interface name of the operating system, and then enter the outer VLAN tag. For example, you can enter eth2.150.

  6. If you want to create a bridge from physical or virtual interfaces whose names are specified in the Interface name field:
    1. Select the Bridge check box. This check box is cleared by default.
    2. If you want to use STP on the bridge to prevent routing loops, select the STP check box. This check box is cleared by default.
    3. In the Age (sec.) field, enter the duration in seconds for which dynamic records are stored in the MAC table of the bridge. If you want to use the bridge as a hub, enter 0 in this field. Range of values: 0 to 86,400.
  7. If you want to enable the NetFlow protocol on the network interface, select the NetFlow check box. This check box is cleared by default.
  8. In the Protocol drop-down list, select Static IPv4 address.
  9. If you do not want the network interface to be automatically enabled when the CPE device is enabled, clear the Enable automatically check box. This check box is selected by default.
  10. If you want an IP address, route, and default gateway automatically assigned to the network interface, select the Force IP, route, and gateway check box. This check box is cleared by default.
  11. In the IPv4 address and subnet mask input type drop-down list, select the method for assigning an IPv4 address to the network interface:
    • Manually to manually assign an IPv4 address. If you select this option, do the following:
      1. In the IPv4 address field, enter the IPv4 address of the network interface.
      2. In the IPv4 netmask field, enter the subnet mask of the network interface.
    • From IP pool to assign an IPv4 address from the specified range of IP addresses. If you select this value, in the IP Pool drop-down list, select a created range of IP addresses.
    • From subnet pool to assign an IPv4 address from the specified range of subnets. If you select this value, in the Subnet Pool drop-down list, select a created range of subnets.
  12. In the IPv4 gateway field, enter the IPv4 address of the default gateway.
  13. In the IPv4 broadcast field, enter the broadcast address of the network interface. If you do not specify a value for this setting, it is generated automatically.
  14. If necessary, specify a DNS server for the network interface:
    1. Under DNS servers, click + Add.
    2. In the field that is displayed, enter the IP address of the DNS server.

    The DNS server is specified and displayed in the DNS servers section. You can specify multiple DNS servers or delete a DNS server. To delete a DNS server, click the delete icon next to it.

  15. In the Override MAC field, enter the MAC address of the network interface. The entered value replaces the actual MAC address of the network interface.
  16. In the Override MTU field, enter the MTU for the network interface. The entered value overrides the default MTU.
  17. In the Route metric field, enter the default route metric for the network interface. The CPE device uses the default route with the lowest metric. For example, you can specify the following default route metrics for network interfaces:
    • 100 for network interface sdwan0
    • 101 for network interface sdwan1
    • 102 for network interface sdwan2

    In this case, the CPE device uses the default route of the sdwan0 network interface. If the sdwan0 network interface fails, the default route of the sdwan1 network interface is used next, followed by the default route of the sdwan2 network interface.

  18. Under DHCP server, in the Type drop-down list, select the operating mode of the DHCP server for the network interface:
    • Disabled. Default value.
    • Relay If you select this value, enter the IP address of the DHCP server in the DHCP server IP field.
    • Server
  19. If the Type drop-down list, you selectedServer, specify the DHCP server settings:
    1. In the First IP field, enter the offset from the base IP address of the network interface for deriving the lowest IP address that can be leased to clients. Default value: 100. You can enter a value greater than 255 for large subnets.
    2. In the Limit field, enter the maximum number of IP addresses that can be leased to clients. Range of values: 1 to 250. Default value: 150.
    3. In the Lease time field, enter the maximum time, in hours, for which an individual IP address can be leased to a client. Range of values: 1 to 250. The value is specified in the following format: <number of hours>h. For example, if you want the maximum lease time to be 5 hours, enter 5h. The default value is 12h.
    4. If necessary, specify a DHCP option:
      1. Under DHCP options, click + Add.
      2. In the field that is displayed, enter the number of the DHCP option in accordance with the RFC 1533 standard. Maximum length: 250 characters.

      The DHCP option is specified and displayed under DHCP options. You can specify multiple DHCP options or delete a DHCP option. To delete a DHCP option, click the delete icon next to it.

  20. Click Create.

    The network interface is created and displayed in the table.

  21. In the upper part of the settings area, click Save to save the settings of the CPE template or CPE device.
Page top
[Topic 258141]

Creating a network interface with a static IPv6 address

To create a network interface with a static IPv6 address:

  1. Create a network interface in one of the following ways:
    • If you want to create a network interface in a CPE template, go to the SD-WAN → CPE templates section, click the CPE template, and select the Network settings tab.
    • If you want to create a network interface on a CPE device, go to the SD-WAN → CPE section, click the CPE device, and select the Network settings tab.

    The table of network interfaces is displayed.

  2. Click + Network interface.
  3. This opens a window; in that window, in the Alias field, enter the name of the network interface for mapping the network interface to an OpenFlow port. You must specify this alias when creating an SD-WAN interface of the WAN type. Maximum length: 15 characters.
  4. If you want to add a network interface to a firewall zone, in the Zone drop-down list, select the created firewall zone.
  5. In the Interface name field, enter the name of the physical port or virtual interface of the operating system of the CPE device. Maximum length: 256 characters. For example, you can enter eth0, eth1, eth2, or tun0. To create a bridge from multiple interfaces, enter their names separated by spaces.

    If you want to assign an outer VLAN tag to a network interface, enter a period (.) after the physical port or virtual interface name of the operating system, and then enter the outer VLAN tag. For example, you can enter eth2.150.

  6. If you want to create a bridge from physical or virtual interfaces whose names are specified in the Interface name field:
    1. Select the Bridge check box. This check box is cleared by default.
    2. If you want to use STP on the bridge to prevent routing loops, select the STP check box. This check box is cleared by default.
    3. In the Age (sec.) field, enter the duration in seconds for which dynamic records are stored in the MAC table of the bridge. If you want to use the bridge as a hub, enter 0 in this field. Range of values: 0 to 86,400.
  7. If you want to enable the NetFlow protocol on the network interface, select the NetFlow check box. This check box is cleared by default.
  8. In the Protocol drop-down list, select Static IPv6 address.
  9. If you do not want the network interface to be automatically enabled when the CPE device is enabled, clear the Enable automatically check box. This check box is selected by default.
  10. If you want an IP address, route, and default gateway automatically assigned to the network interface, select the Force IP, route, and gateway check box. This check box is cleared by default.
  11. In the IPv6 address field, enter the IPv6 address of the network interface. You can specify multiple addresses, separating them with spaces.
  12. In the IPv6 suffix field, enter the IPv6 suffix of the network interface. Maximum length: 30 characters.
  13. In the IPv6 gateway field, enter the IPv6 address of the default gateway.
  14. In the Prefix length field, enter the length of the IPv6 prefix of the network interface. Range of values: 12 to 127.
  15. In the DHCPv6 sub-prefix length field, enter the size of the DHCPv6 sub-prefix of the network interface. Maximum length: 256 characters.
  16. In the IPv6 prefix field, enter the IPv6 prefix of the network interface. Maximum length: 30 characters.
  17. If you want the network interface to accept the specified IPv6 prefix class, do the following:
    1. Under IPv6 class, click + Add.
    2. Enter the name of the IPv6 prefix class in the field that is displayed. Maximum length: 256 characters.

    The IPv6 prefix class is specified and displayed under IPv6 class. You can specify multiple IPv6 prefix classes or delete an IPv6 prefix class. To delete an IPv6 prefix class, click the delete icon next to it.

  18. If necessary, specify a DNS server for the network interface:
    1. Under DNS servers, click + Add.
    2. In the field that is displayed, enter the IP address of the DNS server.

    The DNS server is specified and displayed in the DNS servers section. You can specify multiple DNS servers or delete a DNS server. To delete a DNS server, click the delete icon next to it.

  19. In the Override MAC field, enter the MAC address of the network interface. The entered value replaces the actual MAC address of the network interface.
  20. In the Override MTU field, enter the MTU for the network interface. The entered value overrides the default MTU.
  21. In the Route metric field, enter the default route metric for the network interface. The CPE device uses the default route with the lowest metric. For example, you can specify the following default route metrics for network interfaces:
    • 100 for network interface sdwan0
    • 101 for network interface sdwan1
    • 102 for network interface sdwan2

    In this case, the CPE device uses the default route of the sdwan0 network interface. If the sdwan0 network interface fails, the default route of the sdwan1 network interface is used next, followed by the default route of the sdwan2 network interface.

  22. Under DHCP server, in the Type drop-down list, select the operating mode of the DHCP server for the network interface:
    • Disabled. Default value.
    • Relay If you select this value, enter the IP address of the DHCP server in the DHCP server IP field.
    • Server
  23. If the Type drop-down list, you selectedServer, specify the DHCP server settings:
    1. In the First IP field, enter the offset from the base IP address of the network interface for deriving the lowest IP address that can be leased to clients. Default value: 100. You can enter a value greater than 255 for large subnets.
    2. In the Limit field, enter the maximum number of IP addresses that can be leased to clients. Range of values: 1 to 250. Default value: 150.
    3. In the Lease time field, enter the maximum time, in hours, for which an individual IP address can be leased to a client. Range of values: 1 to 250. The value is specified in the following format: <number of hours>h. For example, if you want the maximum lease time to be 5 hours, enter 5h. The default value is 12h.
    4. If necessary, specify a DHCP option:
      1. Under DHCP options, click + Add.
      2. In the field that is displayed, enter the number of the DHCP option in accordance with the RFC 1533 standard. Maximum length: 250 characters.

      The DHCP option is specified and displayed under DHCP options. You can specify multiple DHCP options or delete a DHCP option. To delete a DHCP option, click the delete icon next to it.

  24. Click Create.

    The network interface is created and displayed in the table.

  25. In the upper part of the settings area, click Save to save the settings of the CPE template or CPE device.
Page top
[Topic 258289]

Creating a network interface for connecting to an LTE network

To create a network interface for connecting to an LTE network:

  1. Create a network interface in one of the following ways:
    • If you want to create a network interface in a CPE template, go to the SD-WAN → CPE templates section, click the CPE template, and select the Network settings tab.
    • If you want to create a network interface on a CPE device, go to the SD-WAN → CPE section, click the CPE device, and select the Network settings tab.

    The table of network interfaces is displayed.

  2. Click + Network interface.
  3. This opens a window; in that window, in the Alias field, enter the name of the network interface for mapping the network interface to a logical WAN interface. Maximum length: 15 characters. The default value is eth1.
  4. In the Zone drop-down list, select a created firewall zone to which you want to add the network interface.
  5. In the Protocol drop-down list, select QMI.
  6. In the QMI name field, enter the path to the modem on the CPE device. Maximum length: 30 characters. For example, you can enter /dev/cdc-wdm0.
  7. In the APN field, enter the APN ID of the service provider that issued the SIM card installed in the modem. Maximum length: 30 characters.
  8. In the Authentication type drop-down list, select the authentication type on the network interface:
    • PAP (Password Authentication Protocol).
    • CHAP (Challenge-Handshake Authentication Protocol).
    • PAP and CHAPmeans that both types of authentication are used on the network interface.
    • Nonemeans that authentication is not used on the network interface.
  9. In the Username for PAP/CHAP authentication field, enter the user name for PAP/CHAP authentication. Maximum length: 30 characters. If you do not want to use authentication, do not specify a value for this setting.
  10. In the Password for PAP/CHAP authentication field, enter the password for PAP/CHAP authentication. Maximum length: 30 characters. If you do not want to use authentication, do not specify a value for this setting.
  11. In the PIN code field, enter the PIN code of the SIM card installed in the modem. Maximum length: 4 digits.
  12. In the Delay field, enter the time in seconds after which the network interface begins to communicate with the modem. Maximum value: 30. This setting is used when the modem takes too long to start.
  13. If necessary, specify a network mode for the network interface:
    1. Under Modes, click + Add.
    2. In the drop-down list, select one of the following values:
      • All (use all available network modes).
      • LTE.
      • UMTS.
      • GSM.
      • CDMA.
      • TD-SCDMA.

    The network mode is specified and displayed under Modes. You can specify multiple network modes or delete a network mode. To delete a network mode, click the delete icon next to it.

  14. In the Connection profile field, enter the connection profile index that the network interface uses instead of the APN ID. Maximum length: 30 characters.
  15. In the IP stack drop-down list, select the IP stack that you is used on the network interface:
    • IPv4 to use the IPv4 protocol stack on the network interface. Default value.
    • IPV6 to use the IPv6 protocol stack on the network interface.
    • Dual stack (IPv4 and IPv6) to use IPv4 and IPv6 dual stack on the network interface.
  16. Clear the IPv4 over DHCP check box if you do not want to assign an IPv4 address to the network interface via DHCP. To select this check box simultaneously with the IPv6 over DHCP check box, select Dual stack (IPv4 and IPv6) (for dual stack) in the IP stack drop-down list. This check box is selected by default.
  17. Select the IPv6 over DHCP check box to assign an IPv6 address to the network interface via DHCP. To select this check box simultaneously with the IPv4 over DHCP check box, select Dual stack (IPv4 and IPv6) in the IP stack drop-down list. This check box is cleared by default.
  18. Clear the Autoconnect check box if you do not want the modem to automatically connect to the network. This check box is selected by default.
  19. In the PLMN field, enter the PLMN ID of the service provider. The first three digits of the PLMN ID are the country code, and the next three digits are the mobile network code.
  20. In the Timeout field, enter the time in seconds for the network interface to wait for the completion of the SIM card operations on the modem. Maximum value: 20. Default value: 10.
  21. In the Serial field, enter the serial port of the modem. Maximum length: 50 characters.
  22. In the Route metric field, enter the default route metric for the network interface. The CPE device uses the default route with the lowest metric. For example, you can specify the following default route metrics for network interfaces:
    • 100 for network interface sdwan0
    • 101 for network interface sdwan1
    • 102 for network interface sdwan2

    In this case, the CPE device uses the default route of the sdwan0 network interface. If the sdwan0 network interface fails, the default route of the sdwan1 network interface is used next, followed by the default route of the sdwan2 network interface.

  23. Click Create.

    The network interface is created and displayed in the table.

  24. In the upper part of the settings area, click Save to save the settings of the CPE template or CPE device.
Page top
[Topic 258298]

Creating a network interface for connecting to a PPPoE server

To create a network interface for connecting to a PPPoE server:

  1. Create a network interface in one of the following ways:
    • If you want to create a network interface in a CPE template, go to the SD-WAN → CPE templates section, click the CPE template, and select the Network settings tab.
    • If you want to create a network interface on a CPE device, go to the SD-WAN → CPE section, click the CPE device, and select the Network settings tab.

    The table of network interfaces is displayed.

  2. Click + Network interface.
  3. This opens a window; in that window, in the Alias field, enter the name of the network interface for mapping the network interface to an OpenFlow port. You must specify this alias when creating an SD-WAN interface of the WAN type. Maximum length: 15 characters.
  4. If you want to add a network interface to a firewall zone, in the Zone drop-down list, select the created firewall zone.
  5. In the Interface name field, enter the name of the physical port or virtual interface of the operating system of the CPE device. Maximum length: 256 characters. For example, you can enter eth0, eth1, eth2, or tun0. To create a bridge from multiple interfaces, enter their names separated by spaces.

    If you want to assign an outer VLAN tag to a network interface, enter a period (.) after the physical port or virtual interface name of the operating system, and then enter the outer VLAN tag. For example, you can enter eth2.150.

  6. In the Protocol drop-down list, select PPPoE.
  7. In the Access concentrator field, enter the IP address or host name of the access concentrator to which the network interface connects. Maximum length: 30 characters. If you do not enter a value in this field, the Point-to-Point Protocol Daemon (PPPD) uses the first access concentrator it detects.
  8. In the Service field, enter the name of the PPPoE service to which the network interface connects. Maximum length: 30 characters. If you do not enter a value in this field, PPPD uses the first service it detects.
  9. In the Authentication type drop-down list, select which authentication is used on the network interface:
    • PAP and CHAP if PAP and CHAP authentication is used on the network interface. If you select this option, do the following:
      1. In the Username for PAP/CHAP authentication field, enter the user name for PAP/CHAP authentication. Maximum length: 30 characters.
      2. In the Password for PAP/CHAP authentication field, enter the password for PAP/CHAP authentication. Maximum length: 30 characters.
    • Nonemeans that authentication is not used on the network interface.
  10. In the Failed pings maximum field, enter the number of unsuccessful ICMP requests before the network interface considers the PPPoE server unavailable. Range of values: 1 to 3600. Default value: 5.
  11. In the Ping interval (sec.) field, enter the interval in seconds that the network interface must wait for before sending ICMP requests to the PPPoE server. Range of values: 1 to 3600. Default value: 1.
  12. If you want the network interface to terminate an inactive PPPoE connection after the specified time, in the Timeout (sec.) field, enter the time in seconds. Range of values: 1 to 3600.
  13. If necessary, in the Host-Uniq field, enter the Host-Uniq tag for the PPPoE connection. Maximum length: 30 characters. If you do not enter a value in this field, the value of the Host-Uniq tag is the same as the PPPD process identifier.
  14. In the Override MTU field, enter the MTU for the network interface. The entered value overrides the default MTU.
  15. In the Route metric field, enter the metric of the network interface. Specify the following metric values for the network interfaces mapped to SD-WAN interfaces of the WAN type:
    • 100 for the network interface mapped to the SD-WAN interface of the WAN type sdwan0.
    • 101 for the network interface mapped to the SD-WAN interface of the WAN type sdwan1.
    • 102 for the network interface mapped to the SD-WAN interface of the WAN type sdwan2.
  16. If necessary, clear the following check boxes:
    • Clear the Keepalive adaptive check box if you want the network interface that has not received Link Control Protocol (LCP) control packets from the PPPoE server to terminate the PPPoE connection, even if traffic has arrived from the PPPoE server.
    • Clear the Use default route check box if you do not want to use the route obtained from the PPPoE server as the default route on the network interface.
    • Clear the Peer-assigned DNS server check box if you do not want the network interface to use DNS servers assigned to its neighbors.

    By default, the check boxes are selected.

  17. If you want to pass additional command line arguments when starting PPPD (Point-to-Point Protocol Daemon), in the Pppd field, enter the command line arguments. For example, you can pass authentication parameters, IP addresses, and scripts to PPPD.
  18. If necessary, specify a DNS server for the network interface:
    1. Under DNS servers, click + Add.
    2. In the field that is displayed, enter the IP address of the DNS server.

    The DNS server is specified and displayed in the DNS servers section. You can specify multiple DNS servers or delete a DNS server. To delete a DNS server, click the delete icon next to it.

  19. Click Create.

    The network interface is created and displayed in the table.

  20. In the upper part of the settings area, click Save to save the settings of the CPE template or CPE device.
Page top
[Topic 272682]

Creating a network interface without an IP address

To create a network interface without an IP address:

  1. Create a network interface in one of the following ways:
    • If you want to create a network interface in a CPE template, go to the SD-WAN → CPE templates section, click the CPE template, and select the Network settings tab.
    • If you want to create a network interface on a CPE device, go to the SD-WAN → CPE section, click the CPE device, and select the Network settings tab.

    The table of network interfaces is displayed.

  2. Click + Network interface.
  3. This opens a window; in that window, in the Alias field, enter the name of the network interface for mapping the network interface to an OpenFlow port. You must specify this alias when creating an SD-WAN interface of the WAN type. Maximum length: 15 characters.
  4. If you want to add a network interface to a firewall zone, in the Zone drop-down list, select the created firewall zone.
  5. In the Interface name field, enter the name of the physical port or virtual interface of the operating system of the CPE device. Maximum length: 256 characters. For example, you can enter eth0, eth1, eth2, or tun0. To create a bridge from multiple interfaces, enter their names separated by spaces.

    If you want to assign an outer VLAN tag to a network interface, enter a period (.) after the physical port or virtual interface name of the operating system, and then enter the outer VLAN tag. For example, you can enter eth2.150.

  6. If you want to create a bridge from physical or virtual interfaces whose names are specified in the Interface name field:
    1. Select the Bridge check box. This check box is cleared by default.
    2. If you want to use STP on the bridge to prevent routing loops, select the STP check box. This check box is cleared by default.
    3. In the Age (sec.) field, enter the duration in seconds for which dynamic records are stored in the MAC table of the bridge. If you want to use the bridge as a hub, enter 0 in this field. Range of values: 0 to 86,400.
  7. If you want to enable the NetFlow protocol on the network interface, select the NetFlow check box. This check box is cleared by default.
  8. In the Protocol drop-down list, select None.
  9. If you want the network interface to be automatically enabled when the CPE device is enabled, select the Enable automatically check box. This check box is cleared by default.
  10. If you want an IP address, route, and default gateway automatically assigned to the network interface, select the Force IP, route, and gateway check box. This check box is cleared by default.
  11. In the Override MAC field, enter the MAC address of the network interface. The entered value replaces the actual MAC address of the network interface.
  12. In the Override MTU field, enter the MTU for the network interface. The entered value overrides the default MTU.
  13. Click Create.

    The network interface is created and displayed in the table.

  14. In the upper part of the settings area, click Save to save the settings of the CPE template or CPE device.
Page top
[Topic 272664]

Editing a network interface

You can edit a network interface in a CPE template or on a CPE device. A network interface edited in the CPE template is automatically modified on all CPE devices that use this CPE template.

To edit a network interface:

  1. Edit a network interface in one of the following ways:
    • If you want to edit a network interface in a CPE template, go to the SD-WAN → CPE templates menu section, click the CPE template, and select the Network settings tab.
    • If you want to edit a network interface on a CPE device, go to the SD-WAN → CPE menu section, click the CPE device, and select the Network settings tab. If you want to edit a network interface inherited from the CPE template, select the Override check box next to the network interface.

    The table of network interfaces is displayed.

  2. Click Edit next to the network interface that you want to edit.
  3. This opens a window; in that window, edit the network interface settings, if necessary. For a description of the settings, see the instructions for creating a network interface.
  4. Click Save.

    The network interface is modified and updated in the table.

  5. In the upper part of the settings area, click Save to save the settings of the CPE template or CPE device.
Page top
[Topic 256453]

Disabling or enabling a network interface

You can disable or enable a network interface in a CPE template or on a CPE device. A network interface enabled or disabled in a CPE template is automatically enabled or disabled on all CPE devices that use this CPE template.

To disable or enable a network interface:

  1. Disable or enable a network interface in one of the following ways:
    • If you want to enable or disable a network interface in a CPE template, go to the SD-WAN → CPE templates menu section, click the CPE template, and select the Network settings tab.
    • If you want to enable or disable a network interface on a CPE device, go to the SD-WAN menu section, click the CPE device, and select the Network settings tab. If you want to disable or enable a network interface inherited from the CPE template, select the Override check box next to the network interface.

    The table of network interfaces is displayed.

  2. Click Disable or Enable next to the network interface that you want to disable or enable.

    The network interface is disabled or enabled.

  3. In the upper part of the settings area, click Save to save the settings of the CPE template or CPE device.
Page top
[Topic 256455]

Canceling the application of network interface settings to a CPE device

If you do not want to apply network interface settings to a CPE device:

  1. In the menu, go to the SD-WAN → CPE section.

    A table of CPE devices is displayed.

  2. Click the CPE device to which you do not want to apply network interface settings.

    The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Configuration tab is selected, which displays general information about the CPE device. This tab also displays the table of Out-of-band management tasks being performed by the orchestrator.

  3. Select the Network settings tab.

    The table of network interfaces is displayed.

  4. Select the Ignore network settings check box. This check box is cleared by default.
  5. In the upper part of the settings area, click Save to save CPE device settings.

Network interface settings are not applied to the CPE device.

If you want to apply network interface settings to the CPE device, clear the Ignore network settings check box.

Page top
[Topic 271755]

Deleting a network interface

You can delete a network interface in a CPE template or on a CPE device. A network inerface deleted in the CPE template is automatically deleted on all CPE devices that use this CPE template. You cannot delete a network interface that is inherited from a CPE template on a CPE device.

Deleted network interfaces cannot be restored.

To delete a network interface:

  1. Delete a network interface in one of the following ways:
    • If you want to delete a network interface in a CPE template, go to the SD-WAN → CPE templates menu section, click the CPE template, and select the Network settings tab.
    • If you want to delete a network interface on a CPE device, go to the SD-WAN → CPE menu section, click the CPE device, and select the Network settings tab.

    The table of network interfaces is displayed.

  2. Click Delete next to the network interface that you want to delete.
  3. In the confirmation window, click Delete.

    The network interface is deleted and is no longer displayed in the table.

  4. In the upper part of the settings area, click Save to save the settings of the CPE template or CPE device.
Page top
[Topic 243374]