EA Feature: SD-WAN with SmartLSM (SmartProvisioning)

This section describes SD-WAN features in the Early Availability stage.

Important - To get these features, you must install the R82 Early Availability packages on the SD-WAN Security Gateway. See the "Downloads" section in sk180605.

For information about SmartLSM (SmartProvisioning), see the SmartProvisioning Administration Guide for your version.

Important - For Branch Gateways, SD-WAN supports this feature only for Quantum Spark Gateways.

1. Configure SD-WAN interfaces on each Security Gateway that uses the SmartLSM Security Profile.

   Follow Step 3 - Configuration on Security Gateways >

   "Part 2 - Configuration of SD-WAN interfaces on the Security Gateway" >

   "Procedure for Quantum Spark Appliance that runs Gaia Embedded OS".

2. Install the SD-WAN Nano-Agent on each Security Gateway that uses the SmartLSM Security Profile.

   Follow Step 3 - Configuration on Security Gateways >

   "Part 3 - Installation of the SD-WAN Nano-Agent on the Security Gateway" >

   "Procedure for Quantum Spark Appliance that runs Gaia Embedded OS".

3. Update the $FWDIR/conf/robo-ike.NDB file on each Security Gateway that uses the SmartLSM Security Profile:

   Note - This step applies only to Security Gateways that are configured as Satellite Gateways in a Star VPN Community.

   1. Connect to the command line on each Security Gateway that is configured as a Satellite Gateway.

   2. If the default shell is Gaia Clish, then go to the Expert mode:

      expert

   3. Rename the current $FWDIR/conf/robo-ike.NDB file:

      mv -v $FWDIR/conf/robo-ike.NDB $FWDIR/conf/robo-ike-ORIGINAL.NDB

   4. In SmartProvisioning GUI, update each Security Gateway that is configured as a Center Gateway in the same Star VPN Community as the Satellite Gateway:

      1. In the top left panel, click Devices.

      2. In the top right panel Devices, select a Security Gateway that is configured as a Center Gateway.

      3. From the top toolbar, click Menu > Actions > Update Selected Corportate Office Gateway.

      Note - For this step, you can also use these Management API commands: "show-vpn-communities-star" with the parameter "details-level "full"" (if you use the "mgmt_cli" tool, then also use the parameter "--format json"). "update-provisioned-satellites".

   5. Make sure a new $FWDIR/conf/robo-ike.NDB file is created on each Security Gateway that is configured as a Satellite Gateway:

      ls -l $FWDIR/conf/robo-ike.NDB

   6. Optional: Delete the original $FWDIR/conf/robo-ike-ORIGINAL.NDB file:

      rm -i $FWDIR/conf/robo-ike-ORIGINAL.NDB

Notes: You must install the SD-WAN Nano-Agent on each Security Gateway that uses the SmartLSM Security Profile. In Infinity Portal > Network view > Profiles page, in an SD-WAN Profile you must select only the SmartLSM Security Profile (not the corresponding Security Gateway object). Infinity Portal > Network view > Agents page shows each corresponding Security Gateway object that uses the SmartLSM Security Profile. If all Security Gateways that use the SmartLSM Security Profile have the same interface names, then you can configure WAN Link Mapping using the interface name. Otherwise (different interface names), use an ISP Tag to make sure WAN Link Mapping is the same and consistent on Security Gateways.