CPE devices relay traffic between your organization's locations and clients, and also have direct access to the internet (DIA) without relaying traffic to the central office. By default, for building the SD-WAN network, an OpenFlow virtual switch (virtual switch; vSwitch) is installed on CPE devices. You can use CPE devices of the following types:
To manage CPE devices, you need to register them.
You can use two-factor authentication to register the CPE device securely. When two-factor authentication is enabled, a token (security key) is recorded in the orchestrator's database; you must then place this token on the CPE device when registering using the Zero Touch Provisioning technology. Registration succeeds if, when the CPE device automatically connects to the orchestrator, the token placed on the device matches the CPE token in the orchestrator database.
For centralized configuration of CPE devices, you can use CPE templates. To avoid configuring each CPE device individually, you can specify the settings in the CPE template and then apply the CPE template to CPE devices when adding or manually registering CPE devices. If you edit a setting in a CPE template, the setting is automatically modified on all CPE devices that are using this CPE template. If you edit a setting on the CPE device, the setting becomes independent of the CPE template, and if the setting is modified in the CPE template, it remains unchanged on the CPE device.
Certain CPE device settings can only be specified in a CPE template, for example, the port number for connecting to the orchestrator.
When you remove a CPE device from the orchestrator web interface, the basic settings are retained on the CPE device. You can re-register the CPE device. When re-registering a CPE device, you cannot use two-factor authentication.
When adding and registering a CPE device, you can select if you want the CPE device to be automatically enabled after registration. When a CPE device is enabled, the CPE template is applied to it and the CPE device becomes available for relaying traffic.
You can reset the CPE device to factory defaults without removing it from the orchestrator by pressing the physical Reset button on the device. To do this, press and hold the button for 10 seconds. This functionality is available for KESR M1, M2, and M3 models.