Citrix SD-WAN

Basic Configuration Mode

March 12, 2021

Contributed by:

The Basic configuration mode allows you to configure sites easily and quickly. Using WAN Link templates, you can configure certain settings and, save it as templates, and then apply these templates to other sites. These reduce repetitive tasks and allow configuring new sites with minimal clicks.

The simplified basic configuration mode has two views Global and Sites.

Using the Global tab, you can:

Install centralized licenses.
Install certificates.
Configure Routing Domains.
Configure Applications.
Set the global virtual WAN network encryption settings.
Set global security settings and firewall settings.
Create Regions and define Region Control Nodes.
Set up Rules.

Using the Sites tab, you can:

Add Sites.
Configure Basic Settings for the site.
Enable site as intermediate node.
Configure centralized licensing
Configure Interface Groups, Virtual IP addresses
Configure routing domains and WAN Links.
Create multiple WAN Link Templates and map it to Service Providers.
Create WAN Link Template for MPLS links.
Configure the WAN Link speeds in Mbps or Kbps.
Set up MPLS Queues using % or kbps.
Enable dynamic virtual path.
Clone Sites.

localized image

Global virtual WAN network encryption

To set global virtual WAN network encryption settings:

In the SD-WAN web management interface, navigate to Configuration Editor > New > Basic. Click Global to change from the (default) Sites view to the Network view.
Under Global, click Virtual WAN Network Settings.
In the right pane, click the Network Settings edit icon.
Select the required network encryption options:
- Network Encryption Mode – This is the encryption algorithm used for encrypted paths. Select one of the following from the drop-down menu: AES 128 Bits or AES 256 Bits.
- Enable Encryption Key Rotation – When enabled, encryption keys are rotated at intervals of 10–15 minutes.
- Enable Extended Packet Encryption Header – When enabled, a 16 bytes encrypted counter is prepended to encrypted traffic to serve as an initialization vector, and randomize packet encryption.
- Enable Extended Packet Authentication Trailer – When enabled, an authentication code is appended to the contents of the encrypted traffic to verify that the message is delivered unaltered.
- Extended Packet Authentication Trailer Type – This is the type of trailer used to validate packet contents. Select one of the following from the drop-down menu: 32-Bit Checksum or SHA-256.
Click Apply.

WAN link template

To create WAN link templates and associate it to service provider:

In the SD-WAN web management interface, navigate to Configuration Editor > New > Basic. Click Global to change from the (default) Sites view to the Network view.
Click + Service Provider. Select and click the default name to rename the service provider.
Click + on the right pane to create a WAN link template. In the WAN Link Templates window, enter a name for the WAN link template.
Select the newly created Service Provider. Click the + Add sign to edit WAN Link templates.
In the Link Type field, select the link type. Either Internet or MPLS.
In the Rate unit field, select a unit for the WAN link speed. Either Kbps or Mbps. Specify the physical rate for LAN to WAN and WAN to LAN.

Tip

Select Auto Learn, to automatically detect the permitted rate.
For MPLS links, create an MPLS Queue. Click + and enter values for the following parameters and click Add.
- DSCP tag - Service Provider’s DSCP tag setting for the queue.
- LAN to WAN Permitted Rate - The amount of bandwidth that SD-WAN devices are permitted to use for upload, which cannot exceed the defined physical upload rate of the WAN Link.
- WAN to LAN Permitted Rate - The amount of bandwidth that SD-WAN devices are permitted to use for download, which cannot exceed the defined physical download rate of the WAN Link.
Tip

You can set the unit for permitted rates of the MPLS queue to % or Kbps.
Click Apply. Continue to add more WAN link templates for the service provider, if necessary.

You can view a summary of the template details in the left pane. The Link type is displayed as broadband in the summary, if you selected internet link type.

Site cloning

The Basic > Sites view simplifies the configuration process by enabling you to create a configuration file that generates a virtual path between the defined sites. The required configuration properties for a virtual path between sites include:

Appliance
Interface
WAN Links
Static Routes

For information on adding and configuring an MCN site, see Setting up the Master Control Node (MCN) Site.

For information on adding and configuring a Branch site, see Adding and Configuring the Branch Sites.

You can now easily duplicate by using the clone option. This simplifies the process of creating multiple similar sites.

Note

A site configured as a primary or secondary MCN cannot be cloned.

To clone a site:

In the SD-WAN web management interface, navigate to Configuration Editor > Basic. Click Sites.
Select a site other than primary or secondary MCN and click the clone icon.
In the Clone Site window, review the fields and change the values for the fields for which the input values must be different from the site being cloned.
Click Clone. The cloned site appears in the list of sites.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

NetScaler Secure Deployment Guide

Basic Configuration Mode

March 12, 2021

Contributed by:

Basic Configuration Mode

Global virtual WAN network encryption

WAN link template

Site cloning

In this article