Configuring SD-WAN for Internet traffic

This chapter describes how to extend SD-WAN to the Internet access as well. We will implement a hybrid Local + Remote Breakout, also known as Direct Internet Access (DIA) + Remote Internet Access (RIA). Our overlays over MPLS network will be used for RIA, when the DIA quality is not acceptable.

Configuring SD-WAN for Internet traffic involves the following steps:

1. Add a new SD-WAN interface member. See Configuring SD-WAN interface members.
2. Create a health check server. See Creating health-check servers.
3. Edit SD-WAN template for branches to add a new underlay zone. See Editing SD-WAN templates for branches.
4. Create new performance SLA. See Configuring performance SLA.
5. Create SD-WAN rules for DIA/RIA. See Creating SD-WAN rules for DIA/RIA.
6. Update firewall policies. See Updating firewall policies.
7. Configure a static route. See Configuring the static routes.