Traffic encryption on a link

Expand all | Collapse all

You can enable or disable traffic encryption on an individual tunnel. The tunnels are displayed in a common table in the Tunnels section; in the graphical topology in the Topology section; and in the CPE device configuration on the Tunnels tab. Only tunnels built using the particular CPE device are displayed in the configuration of that device.

When enabling or disabling traffic encryption on an individual tunnel, you must configure the opposite-direction tunnel in the same way. To enable or disable traffic encryption on a tunnel, use the following instructions:

• Enabling or disabling traffic encryption on a tunnel using the overall table of tunnels.

  To enable or disable traffic encryption on a tunnel using the overall table of tunnels:

  1. In the menu, go to the Infrastructure section.

     This opens the resource management page. By default, the Network resources tab is selected, which displays the table of SD-WAN and SDN Controllers.

  2. Click Management → Configuration menu next to the SD-WAN Controller.

     This opens the Controller configuration menu. By default, you are taken to the Controller nodes section, which displays a table of Controller nodes.

  3. Go to the Tunnels section.

     A table of tunnels is displayed.

  4. Click Management next to the tunnel and in the drop-down list, select Set encryption.
  5. This opens a window; in that window, select or clear the Override check box to enable or disable encryption of the selected tunnel. This check box is cleared by default.
  6. Select or clear the Enable encryption check box. This check box is cleared by default.
  7. Click Save.
• Enabling or disabling traffic encryption on a tunnel using the graphical topology.

  To enable or disable traffic encryption on a tunnel using the graphical topology:

  1. In the menu, go to the Infrastructure section.

     This opens the resource management page. By default, the Network resources tab is selected, which displays the table of SD-WAN and SDN Controllers.

  2. Click Management → Configuration menu next to the SD-WAN Controller.

     This opens the Controller configuration menu. By default, you are taken to the Controller nodes section, which displays a table of Controller nodes.

  3. Go to the Topology section.

     The SD-WAN topology is displayed.

  4. Click the tunnel to open a window and in that window, click Set encryption.
  5. This opens a window; in that window, select or clear the Override check box to enable or disable encryption of the selected tunnel. This check box is cleared by default.
  6. Select or clear the Enable encryption check box. This check box is cleared by default.
  7. Click Save.
• Enabling or disabling traffic encryption on a tunnel in the configuration of a CPE device.

  To enable or disable traffic encryption on a tunnel in the configuration of a CPE device:

  1. In the menu, go to the SD-WAN → CPE section.

     A table of CPE devices is displayed.

  2. Click the CPE device.

     The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Configuration tab is selected, which displays the current configuration of the CPE device. This tab also displays the table of Out-of-band management CPE device configurations.

  3. Select the Tunnels tab.

     A table of tunnels is displayed.

  4. Click Management next to the tunnel and in the drop-down list, select Set encryption.
  5. This opens a window; in that window, select or clear the Override check box to enable or disable encryption of the selected tunnel. This check box is cleared by default.
  6. Select or clear the Enable encryption check box. This check box is cleared by default.
  7. In the upper part of the settings area, click Save to save CPE device settings.