New SD-WAN template
With the new SD-WAN template, you can use Device VDOM meta fields in the member interface/ interface gateway, neighbor IP, and health-check server definitions.
In addition, how you enable and configure SD-WAN per-device management and central management has changed. You now use the following methods to enable and configure each:
- For per-device management, use the device database to configure SD-WAN settings on each device.
- For central management, use SD-WAN templates to configure SD-WAN settings on one or more devices. SD-WAN templates have moved in Device Manager to Provisioning Templates.
When you assign an SD-WAN template to a device, you have enabled SD-WAN central management for the device.
Normalized interfaces are not supported for SD-WAN templates. You can create multiple SD-WAN zones and add interface members to the SD-WAN zones. You must bind the interface members by name to physical interfaces or VPN interfaces.
When using SD-WAN templates with other types of provisioning templates, such as interface templates and IPsec templates, you should execute the templates in the following order:
- Interface template
- IPsec template
- SD-WAN template
This topic contains the following sections:
SD-WAN per-device management
For SD-WAN per-device management, you can create, edit, and delete interface members, performance SLA, SD-WAN rules, Neighbor, and duplication. After configuring SD-WAN settings, install the configuration to the device.
To access SD-WAN per-device management:
- If using ADOMs, ensure that you are in the correct ADOM.
- Open the device database for the device:
- Go to Device Manager > Device & Groups.
- From the toolbar, select Table View.
- In the tree menu, select a device group.
The devices in the group are displayed in the content pane.
- In the content pane, double-click a device.
Alternately, select a device, and select Configuration from the More menu.
The device database is displayed in the content pane.
- In the toolbar, click the System menu, and select SD-WAN.
The SD-WAN pane opens.
- Configure the following sections for the device, and click Apply:
- Interface Members
- Performance SLA
- SD-WAN Rules
- Neighbor
- Duplication
- Install the configuration to the device.
SD-WAN central management
For SD-WAN central management, you can create an SD-WAN template, and assign the template to one or more devices.
Normalized interfaces are not supported for SD-WAN templates. You can create multiple SD-WAN zones and add interface members to the SD-WAN zones. You must bind the interface members by name to physical interfaces or VPN interfaces.
Create performance SLA and SD-WAN rules. You can also configure BGP neighbors and packet duplication. Advanced configuration options are also available.
After configuring an SD-WAN template, assign the template to one or more devices, and then install the configuration to the devices.
To access SD-WAN central management:
- If using ADOMs, ensure that you are in the correct ADOM.
- Go to Device Manager > Provisioning Templates > SD-WAN Templates.
The SD-WAN templates are displayed.
- Click Create New, and select Template.
The SD-WAN Template pane is displayed.
- In the Interface Members section, create one or more zones:
- Click Create New > SD-WAN Zone.
The Create New SD-WAN Zone dialog box is displayed.
- In the Name box, type a name for the zone.
- Beside Interface Members, click the box to select interface members.
- Click OK.
The SD-WAN zone is created.
- Click Create New > SD-WAN Zone.
- In the Interface Members section, create SD-WAN interface members:
- Click Create New > SD-WAN Member.
The Create New SD-WAN Interface Member dialog box is displayed.
- In the Interface Members box, type the name of the interface.
Bind the interfaces by name to physical or VPN interfaces.
- Click OK.
The SD-WAN interface member is created.
- Click Create New > SD-WAN Member.
- Create Performance SLA:
- In the Performance SLA section, click Create New.
The Performance SLA dialog box is displayed.
- Complete the options, and click OK.
The Performance SLA settings are saved.
- In the Performance SLA section, click Create New.
- Create SD-WAN rules.
- In the SD-WAN Rules section, click Create New.
The SD-WAN Rule dialog box is displayed.
- Complete the options, and click OK.
The SD-WAN rules are saved.
- In the SD-WAN Rules section, click Create New.
- Configure BGP neighbors.
- In the Neighbor section, click Create New.
The Neighbor dialog box is displayed.
- Complete the options, and click OK.
The neighbor settings are saved.
- In the Neighbor section, click Create New.
- Configure packet duplication.
- In the Duplication section, click Create New.
The Duplication dialog box is displayed.
- Complete the options, and click OK.
The packet duplication settings are saved.
- In the Duplication section, click Create New.
- Click OK.
The SD-WAN template is saved.
- Assign the SD-WAN template to one or more devices.
- Select the SD-WAN template, and click Assign to Device.
The Assign to Device dialog box is displayed.
- In the Available Entries list, select the device, and click the right arrow to move the device to the Selected Entries list, and click OK.
The SD-WAN template is assigned to the device.
- Select the SD-WAN template, and click Assign to Device.
- Go to Device Manager > Device & Groups, and view the assigned provisioning templates in the Template Status column.
- Click Install Wizard to install the device settings.
You can preview the settings.
SD-WAN template support for meta fields
SD-WAN templates support Device VDOM meta fields. You can use meta fields in SD-WAN templates for the following options:
- SD-WAN interface member
- Interface member option
- Gateway IP option
- Neighbor
- IP option
- Performance SLA
- Health-Check Server option
To create meta fields:
- Go to System Settings > Advanced > Meta Fields.
- Click Create New.
The Create New Meta Fields pane is displayed.
- In the Object box, select Device VDOM.
- In the Name box, type a name for the meta field.
The name of the field becomes the variable name that you can use in SD-WAN templates.
- In the Values area, click Create New to define a value for one or more devices.
- Click OK.
The meta field is created.
In the following SD-WAN template example, meta fields are used for the following interface member options: Interface Member and Gateway IP:
In the following SD-WAN template example, a meta field is used for the Health-Check Server option in Performance SLA:
In the following SD-WAN template example, a meta field is used for the IP option in Neighbor: