Kaspersky SD-WAN

Managing IP routing rules

You can view the table of IP rules in a CPE template and on a CPE device:

• To view the table of IP rules in a CPE template, go to the SD-WAN → CPE templates menu section, click the CPE template, and in the sidebar, select the PBR section.
• To view the table of IP rules on a CPE device, go to the SD-WAN → CPE menu section, click the CPE device, and in the sidebar, select the PBR section.

Information about IP rules is displayed in the following columns of the table:

• Priority is the rule priority. Rules with a lower priority value are applied earlier.
• Status is the status of the rule. Possible values:
  • Enabled means the rule is active.
  • Disabled means the rule is inactive.
• IP Protocol is the encapsulated protocol. The following values are possible:
  • TCP
  • UDP
  • ICMP
  • SCTP
  • AH
  • ESP
  • GRE
  • IPIP
• Source host or network is the host or network of the source.
• Source port is the source port.
• Source network interface is the inbound interface to be matched. If the interface is a loopback interface, the rule matches only packets originating from this host.
• Destination host or network is the host or network of the destination.
• Destination port is the destination port.
• Destination network interface is the outbound interface to be matched. The outbound interface is available only for packets originating from local sockets bound to the device.
• "sdwan.pbr.ip.rule": "IP address rule",
• "sdwan.pbr.lookup.vrf": "Lookup VRF",
• "sdwan.pbr.max.rules.hint": "{currentValue} out of {maxValue} rules already created",
• "sdwan.pbr.port.hint": "You can enter either a single value or a range of values from 1 to 65535 separated by a dash. Examples:<br></br>443<br></br>1024-65535",
• "sdwan.pbr.priority.hint": "The lower the priority value, the earlier it is applied.",
• "sdwan.pbr.src.interface.hint": "Incoming interface to match. If the interface is a loopback, the rule only matches packets originating from this host.",
• "sdwan.pbr.vrf.main.error": "Unable to save rule for this VRF: source IP address other than 0.0.0.0/0 must be specified.",
• VRF is the VRF in which the search for routes is performed.
• Actions lists actions that can be performed with the IP rule (enable, disable, edit, delete).