Configuring the SD-WAN Controller

This section describes the actions you can perform with the SD-WAN Controller after deployment.

Editing the SD-WAN Controller

To edit an SD-WAN Controller:

1. In the menu, go to the Infrastructure section.

   The SD-WAN infrastructure management page is displayed. By default, the Network resources tab is selected, which displays the table of SD-WAN Controllers.

2. Click Management next to the SD-WAN Controller and in the drop-down list, select Edit.
3. This opens a window; in that window, edit the settings that you want to change.
4. Click Save.

Restarting the SD-WAN Controller

Some changes you make to the configuration of the SD-WAN controller require reprovisioning to take effect. Reprovisioning resets the controller properties to their default values, which can help resolve problems and configuration errors.

You can also reprovision the controller when replacing old hardware with new hardware or upgrading software to ensure that new features and improvements are successfully integrated into the solution infrastructure, smoothly interact with

To restart the SD-WAN Controller:

1. In the menu, go to the Infrastructure section.

   The SD-WAN infrastructure management page is displayed. By default, the Network resources tab is selected, which displays the table of SD-WAN Controllers.

2. Click Management next to the SD-WAN Controller and in the drop-down list, select Reprovision.
3. In the confirmation window, click Reprovision.

Downloading a backup SD-WAN Controller configuration file

The configuration backup file is used to restore the functionality of the SD-WAN Controller, configure Controllers in different system environments in the same way, and maintain version control of configuration on your local devices to let you revert to any version if necessary.

Backup files also let you document the configuration process for the Controller for analyzing changes and internal audits.

To download a backup SD-WAN Controller configuration file:

1. In the menu, go to the Infrastructure section.

   The SD-WAN infrastructure management page is displayed. By default, the Network resources tab is selected, which displays the table of SD-WAN Controllers.

2. Click Management next to the SD-WAN Controller and in the drop-down list, select Download backup file.

A YAML file containing the SD-WAN Controller configuration is saved to your local device.

Restoring the SD-WAN Controller

You can restore the SD-WAN Controller configuration using a previously downloaded backup file.

To restore an SD-WAN Controller:

1. In the menu, go to the Infrastructure section.

   The SD-WAN infrastructure management page is displayed. By default, the Network resources tab is selected, which displays the table of SD-WAN Controllers.

2. Click Management next to the SD-WAN Controller and in the drop-down list, select Restore.
3. This opens a window; in that window, specify the path to the SD-WAN Controller configuration file.
4. Click Restore.

Deleting the SD-WAN Controller

Deleted SD-WAN Controllers cannot be restored.

To delete an SD-WAN Controller:

1. In the menu, go to the Infrastructure section.

   The SD-WAN infrastructure management page is displayed. By default, the Network resources tab is selected, which displays the table of SD-WAN Controllers.

2. Click Management next to the SD-WAN Controller and in the drop-down list, select Delete.
3. In the confirmation window, click Delete.

The SD-WAN Controller is deleted and is no longer displayed in the table.

SD-WAN Controller properties

A deployed SD-WAN Controller has default properties. Each property regulates the Controller, for example, the controller.listen.port property specifies the TCP interface for incoming connections to which CPE devices connect.

Properties have change methods that determine whether the value of an individual property can be changed and at which time the change takes effect. A property can have the following change methods:

• Read-only — This property directly affects the operation of the SD-WAN Controller and cannot be changed.
• Reload — The property can be changed. When a property changes value, the orchestrator commits the new value to the database of the SD-WAN Controller. The new value takes effect after the Controller is restarted.

  A property value that is in the database, but has not yet taken effect is called a planning value. You can delete a planning value before restarting the SD-WAN Controller to keep the current value.

• Runtime — The property can be changed. The new value takes effect immediately.

You can modify properties with the Reload and Runtime change methods, reset them to default values, and delete planning values.

If your SD-WAN Controller is deployed as a multi-node cluster, you must change properties while configuring the whole cluster. You cannot change the properties of an SD-WAN Controller while configuring one of its nodes.

Editing or resetting SD-WAN Controller properties

Changes you make to SD-WAN Controller properties with the Runtime change method take effect immediately, while properties with the Reload method require Controller restart.

To change Controller properties or reset them to default values:

1. In the menu, go to the Infrastructure section.

   The SD-WAN infrastructure management page is displayed. By default, the Network resources tab is selected, which displays the table of SD-WAN Controllers.

2. Click Management next to the SD-WAN Controller and in the drop-down list, select Properties.

   The SD-WAN Controller properties page is displayed. By default, the All properties tab is selected, which displays a table of Controller properties.

3. Select the Changeable properties tab.

   A table of editable properties of the Controller is displayed.

4. If necessary, edit the value of an individual property:
   1. Click Management next to the property and in the drop-down list, select Edit.
   2. This opens a window; in that window, in the Planned value field, enter the new value of the property.
   3. Click Save.

   If you changed a property with a Runtime change method, the new value is displayed in the Current value column. The new value of a property with the Reload method is displayed in the Planned value column.

5. If necessary, reset an individual property to its default value:
   1. Click Management next to the property and in the drop-down list, select Reset property.
   2. In the confirmation window, click Reset.
6. If necessary, reset all properties to their default values:
   1. In the upper part of the page, click the settings button and in the drop-down list, select Reset all properties.
   2. In the confirmation window, click Reset.

Deleting an SD-WAN Controller property planning value

To cancel the change of an SD-WAN Controller property, you must delete the corresponding planning value. This action is applicable only to properties that have the Reload method.

To delete a planning value of an SD-WAN Controller property:

1. In the menu, go to the Infrastructure section.

   The SD-WAN infrastructure management page is displayed. By default, the Network resources tab is selected, which displays the table of SD-WAN Controllers.

2. Click Management next to the SD-WAN Controller and in the drop-down list, select Properties.

   The SD-WAN Controller properties page is displayed. By default, the All properties tab is selected, which displays a table of Controller properties.

3. Select the Changeable properties tab.

   A table of editable properties of the Controller is displayed.

4. If necessary, delete the planning value of an individual property:
   1. Click Management next to the property and in the drop-down list, select Delete planned value.
   2. In the confirmation window, click Delete.
5. If necessary, delete the planning values of all properties:
   1. In the upper part of the page, click the settings button and in the drop-down list, select Delete all planned values.
   2. In the confirmation window, click Delete.

An individual planning value or all planning values are deleted and are no longer displayed in the table.

Viewing information about SD-WAN Controller nodes

The additional SD-WAN Controller configuration menu displays all nodes of the SD-WAN Controller — primary and secondary (if any). You can view statistics for each node, as well as a table of their properties.

To view information about SD-WAN Controller nodes:

1. In the menu, go to the Infrastructure section.

   The SD-WAN infrastructure management page is displayed. By default, the Network resources tab is selected, which displays the table of SD-WAN Controllers.

2. Click Management next to the SD-WAN Controller and in the drop-down list, select Configuration menu.

   This opens the SD-WAN Controller configuration menu. By default, you are taken to the Controller nodes section, which displays a table of Controller nodes.

3. To view statistics for a node, click Management next to the node and in the drop-down list, select Statistics.
4. To view the properties of a node, click Management next to the node and in the drop-down list, select Node properties.

Viewing the topology of a deployed SD-WAN instance

You can view the topology of a deployed SD-WAN instance. This topology displays all links and segments between CPE devices, as well as the paths within the segments.

Note that a link between two CPE devices can be selected and configured. For example, in the topology of an SD-WAN instance, you can set the cost of the link and enable monitoring of the link.

To view the topology of a deployed SD-WAN instance:

1. In the menu, go to the Infrastructure section.

   The SD-WAN infrastructure management page is displayed. By default, the Network resources tab is selected, which displays the table of SD-WAN Controllers.

2. Click Management next to the SD-WAN Controller and in the drop-down list, select Configuration menu.

   This opens the SD-WAN Controller configuration menu. By default, you are taken to the Controller nodes section, which displays a table of Controller nodes.

3. Go to the Topology section.

   The SD-WAN topology is displayed.

4. If necessary, configure the topology:
   • Select the Tunnel utilization check box to display the utilization of the links. The utilization level of the link is represented by the following colors:
     • Green — Low link utilization.
     • Yellow — Medium link utilization.
     • Red — High link utilization.
   • Select the Segments check box and in the Segment switches drop-down list, select two CPE devices to display all links between those devices.
   • Select the Inband management check box to display the dynamic routing topology for traffic that manages switches within communication channels.

     This dynamic routing protocol is used only by hardware SDN switches, so selecting this check box will have no effect when managing Kaspersky SD-WAN.

   • Select the Name check box to display the names of CPE devices used in the topology.
   • Select the IP address check box to you display the IP addresses of CPE devices used in the topology.

   By default, all check boxes are cleared.