EA Feature: SD-WAN with SmartLSM (SmartProvisioning)

This section describes an SD-WAN feature in the Early Availability stage.

Important:

  • Contact the SD-WAN team to get information about the new R82 SD-WAN Early Availability features before starting your journey.

  • To get this feature, you must install the R82 Early Availability packages on the SD-WAN Security Gateway.

    See the "Downloads" section in sk180605.

For information about SmartLSM (SmartProvisioning), see the SmartProvisioning Administration Guide for your version.

Important - For Branch Gateways, SD-WAN supports this feature only for Quantum Spark Gateways.

  1. Configure SD-WAN interfaces on each Security Gateway that uses the SmartLSM Security Profile.

    Follow Step 3 - Configuration on Security Gateways >

    "Part 2 - Configuration of SD-WAN interfaces on the Security Gateway" >

    "Procedure for Quantum Spark Appliance that runs Gaia Embedded OS".

  2. Install the Nano-Agent on each Security Gateway that uses the SmartLSM Security Profile.

    Follow Step 3 - Configuration on Security Gateways >

    "Part 3 - Installation of the Nano-Agent on the Security Gateway" >

    "Procedure for Quantum Spark Appliance that runs Gaia Embedded OS".

  3. Update the $FWDIR/conf/robo-ike.NDB file on each Security Gateway that uses the SmartLSM Security Profile:

    Note - This step applies only to Security Gateways that are configured as Satellite Gateways in a Star VPN Community.

    1. Connect to the command line on each Security Gateway that is configured as a Satellite Gateway.

    2. If the default shell is Gaia Clish, then go to the Expert mode:

      expert

    3. Rename the current $FWDIR/conf/robo-ike.NDB file:

      mv -v $FWDIR/conf/robo-ike.NDB $FWDIR/conf/robo-ike-ORIGINAL.NDB

    4. In SmartProvisioning GUI, update each Security Gateway that is configured as a Center Gateway in the same Star VPN Community as the Satellite Gateway:

      1. In the top left panel, click Devices.

      2. In the top right panel Devices, select a Security Gateway that is configured as a Center Gateway.

      3. From the top toolbar, click Menu > Actions > Update Selected Corportate Office Gateway.

      Note - For this step, you can also use these Management API commands:

    5. Make sure a new $FWDIR/conf/robo-ike.NDB file is created on each Security Gateway that is configured as a Satellite Gateway:

      ls -l $FWDIR/conf/robo-ike.NDB

    6. Optional: Delete the original $FWDIR/conf/robo-ike-ORIGINAL.NDB file:

      rm -i $FWDIR/conf/robo-ike-ORIGINAL.NDB

Notes:

  • You must install the Nano-Agent on each Security Gateway that uses the SmartLSM Security Profile.

  • In Infinity Portal > Network view > Profiles page, in an SD-WAN Profile you must select only the SmartLSM Security Profile (not the corresponding Security Gateway object).

  • Infinity Portal > Network view > Agents page shows each corresponding Security Gateway object that uses the SmartLSM Security Profile.

  • If all Security Gateways that use the SmartLSM Security Profile have the same interface names, then you can configure WAN Link Mapping using the interface name.

    Otherwise (different interface names), use an ISP Tag to make sure WAN Link Mapping is the same and consistent on Security Gateways.