Kaspersky SD-WAN

Managing L3 VPN transport services

To display the table of L3 VPN services, go to the Infrastructure menu section, click Management → Configuration menu next to the controller, and go to the L3 VPN services section. Information about L3 VPN services is displayed in the following columns of the table:

  • Name is the of the L3 VPN service.
  • Type is the topology type of the L3 VPN service.
  • Inter-spoke through hub indicates whether communication is possible between spoke sites through the hub site:
    • Yes
    • No
  • Endpoints is the information about the L3 interfaces that have been added to the L3 VPN service:
    • If the L3 interfaces are mapped to M2M services, the M2M service names are displayed.
    • If the L3 interfaces are mapped to service interfaces, the following information is displayed:
      • Names and DPIDs of the CPE devices on which the service interfaces were created
      • Numbers of OpenFlow ports which the service interfaces are mapped to
      • Quality of service rules specified for the service interfaces
      • Traffic filters specified for the service interfaces
    • IP prefixes of the L3 interfaces
    • MAC addresses of the L3 interfaces
    • Time period in seconds during which entries are kept in the ARP table on the controller
  • Routes is the information about static routes that have been added to the L3 VPN service:
    • Destination IPv4 prefixes of static routes
    • Gateway IPv4 addresses for routing traffic packets to destination IPv4 prefixes of static routes
    • L3 interfaces behind which the destination IPv4 prefixes of static routes are
    • Metrics of the static routes
  • DHCP servers are IPv4 addresses of DHCP servers specified for the L3 VPN service.
  • Status is the status of the L3 VPN service:
    • Up
    • Down
  • Errors are errors that occurred while the L3 VPN service was running.

The actions you can perform with the table are described in the Managing solution component tables instructions.

In this section

Creating an L3 VPN service

Managing the ARP table of an L3 VPN service

Viewing the routing and forwarding table of an L3 VPN service

Editing an L3 VPN service

Restarting an L3 VPN service

Deleting an L3 VPN service

Page top
[Topic 261851]

Creating an L3 VPN service

To create an L3 VPN service:

  1. In the menu, go to the Infrastructure section.

    This opens the resource management page. By default, the Network resources tab is selected, which displays the table of controllers.

  2. Click Management → Configuration menu next to the controller.

    This opens the controller configuration menu. By default, you are taken to the Controller nodes section, which displays a table of controller nodes.

  3. Go to the L3 VPN services section.

    A table of L3 VPN services is displayed.

  4. In the upper part of the page, click + L3 VPN service.
  5. This opens a window; in that window, in the Name field, enter the name of the L3 VPN service.
  6. In the Constraint drop-down list, select the created Manual-TE constraint or threshold constraint that you want to add to the L3 VPN service.
  7. In the Balancing mode drop-down list, select the balancing mode for balancing traffic across links:
    • Per-flow means the traffic streams (5-Tuple) are distributed among the links in accordance with the link cost. Default value.
    • Per-packet means the traffic packets are distributed among the links in accordance with the link cost.
    • Broadcast means the traffic packets are duplicated and transmitted simultaneously through all links to avoid loss.

    You can manually specify link cost.

  8. Click Next to proceed to the next group of settings.
  9. Add the L3 interface to the L3 VPN service:
    1. In the Mode drop-down list, select the type of the L3 interface:
      • M2M service means the L3 interface is mapped to an M2M service.
      • Service interface means the L3 interface is mapped to a service interface.
    2. If in the Mode drop-down list, you selected M2M service, in the M2M service drop-down list, select the created M2M service mapped to the L3 interface.
    3. If in the Mode drop-down list, you selectedService interface, configure the service interface:
      1. In the Switch and Port drop-down lists, select the CPE device and the created service interface to which the L3 interface is mapped.
      2. In the QoS drop-down list, select the created quality of service rule for the L3 interface.
      3. In the Inbound filter drop-down list, select the created traffic filter for the L3 interface.
      4. If you want to display service interfaces that were added to transport services in the Port drop-down list, select the Show used interfaces check box. This check box is cleared by default.
    4. In the IP field, enter the IP address of the L3 interface.
    5. In the Prefix length field, enter the length of the L3 interface prefix. Range of values: 0 to 32.
    6. In the MAC address field, enter the MAC address of the L3 interface. You can generate a MAC address by clicking Generate.
    7. In the ARP age (sec.) field, enter the time period in seconds during which entries are kept in the ARP table on the L3 VPN service. Range of values: 1 to 65,535. Default value: 200.
    8. Click + Add.

    The L3 interface is added and displayed in the lower part of the window. You can add multiple L3 interfaces or delete an L3 interface. To delete an L3 interface, click Delete next to it.

  10. Click Next to proceed to the next group of settings.
  11. If you want to add a static route to the L3 VPN service:
    1. In the IP field, enter the destination IPv4 address of the static route.
    2. In the Prefix length field, enter the length of the IPv4 prefix of the static route. Range of values: 0 to 32.
    3. In the SVI drop-down list, select the added L3 interface followed by the IPv4 prefix of the static route destination. You added an L3 interface at step 9 of these instructions.
    4. In the Gateway field, enter the IPv4 address of the gateway for routing traffic packets to the IPv4 prefix of the static route destination.
    5. In the Metric field, enter a metric for the static route. Default value: 0.
    6. Click + Add.

    The static route is added and displayed in the lower part of the window. You can add multiple static routes or delete a static route. To delete a static route, click Delete next to it.

  12. Click Next to proceed to the next group of settings.
  13. Click Create.

The L3 VPN service is created and displayed in the table.

See also

Scenario: Directing application traffic to a transport service

Page top
[Topic 245751]

Managing the ARP table of an L3 VPN service

To display the ARP table of the L3 VPN service, go to the Infrastructure section, click Management → Configuration menu next to the controller, go to the L3 VPN services section, and click Management → ARP table next to the L3 VPN service. Information about records is displayed in the following columns of the table:

  • IP is the IP address of the service interface.
  • MAC is the MAC address of the service interface.
  • Service interface is the information about the service interface:
    • Name and DPID of the CPE device on which the service interface was created
    • Number of the OpenFlow port which the service interface is mapped to
  • Timeout maximum life (sec.) is the time in seconds that has elapsed since the record was created.

The actions you can perform with the table are described in the Managing solution component tables instructions.

In this section

Creating a static record in the ARP table of an L3 VPN service

Editing a static record in the ARP table of an L3 VPN service

Deleting a static record in the ARP table of an L3 VPN service

Page top
[Topic 277154]

Creating a static record in the ARP table of an L3 VPN service

To create a static record in the ARP table of an L3 VPN service:

  1. In the menu, go to the Infrastructure section.

    This opens the resource management page. By default, the Network resources tab is selected, which displays the table of controllers.

  2. Click Management → Configuration menu next to the controller.
  3. Go to the L3 VPN services section.

    A table of L3 VPN services is displayed.

  4. Click Management → ARP table next to the L3 VPN service in whose ARP table you want to create a static record.

    The page with the ARP table of the L3 VPN service is displayed.

  5. In the upper part of the page, click + Static ARP record.
  6. This opens a window; in that window, in the Switch and Port drop-down lists, select the CPE device and the created service interface for which you want to specify an IP address and a MAC address.
  7. In the IP address field, enter the IP address of the service interface.
  8. In the MAC field, enter the MAC address of the service interface.
  9. Click Create.

The static record is created and displayed in the ARP table of the L3 VPN service.

Page top
[Topic 249062]

Editing a static record in the ARP table of an L3 VPN service

To edit a static record in the ARP table of an L3 VPN service:

  1. In the menu, go to the Infrastructure section.

    This opens the resource management page. By default, the Network resources tab is selected, which displays the table of controllers.

  2. Click Management → Configuration menu next to the controller.
  3. Go to the L3 VPN services section.

    A table of L3 VPN services is displayed.

  4. Click Management → ARP table next to the L3 VPN service in whose ARP table you want to edit a static record.

    The page with the ARP table of the L3 VPN service is displayed.

  5. Click Management → Edit next to the static record that you want to edit.
  6. This opens a window; in that window, if necessary, edit the IP address and/or MAC address of the service interface.
  7. Click Save.

The static record is modified and updated in the table.

Page top
[Topic 256686]

Deleting a static record in the ARP table of an L3 VPN service

Deleted static records in the ARP table of an L3 VPN service cannot be restored.

To delete a static record in the ARP table of an L3 VPN service:

  1. In the menu, go to the Infrastructure section.

    This opens the resource management page. By default, the Network resources tab is selected, which displays the table of controllers.

  2. Click Management → Configuration menu next to the controller.

    This opens the controller configuration menu. By default, you are taken to the Controller nodes section, which displays a table of controller nodes.

  3. Go to the L3 VPN services section.

    A table of L3 VPN services is displayed.

  4. Click Management → ARP table next to the L3 VPN service in whose ARP table you want to delete a static record.

    The page with the ARP table of the L3 VPN service is displayed.

  5. Click Management → Delete next to the static record that you want to delete.
  6. In the confirmation window, click Delete.

The static record is deleted and no longer displayed in the table.

Page top
[Topic 256689]

Viewing the routing and forwarding table of an L3 VPN service

To view the routing and forwarding table of an L3 VPN service:

  1. In the menu, go to the Infrastructure section.

    This opens the resource management page. By default, the Network resources tab is selected, which displays the table of controllers.

  2. Click Management → Configuration menu next to the controller.
  3. Go to the L3 VPN services section.

    A table of L3 VPN services is displayed.

  4. Click Management → Routing table next to the L3 VPN service whose routing table you want to view.

This opens a window with the routing and forwarding table of the L3 VPN service.

Page top
[Topic 256691]

Editing an L3 VPN service

To edit an L3 VPN service:

  1. In the menu, go to the Infrastructure section.

    This opens the resource management page. By default, the Network resources tab is selected, which displays the table of controllers.

  2. Click Management → Configuration menu next to the controller.

    This opens the controller configuration menu. By default, you are taken to the Controller nodes section, which displays a table of controller nodes.

  3. Go to the L3 VPN services section.

    A table of L3 VPN services is displayed.

  4. Click Management → Edit next to the L3 VPN service that you want to edit.
  5. This opens a window; in that window, if necessary, edit the L3 VPN service settings. For a description of the settings, see the instructions for creating an L3 VPN service.
  6. Click Save.

The L3 VPN service is modified and updated in the table.

See also

Scenario: Directing application traffic to a transport service

Page top
[Topic 256679]

Restarting an L3 VPN service

You can restart an L3 VPN service to restore it in case of malfunctions. When you restart an L3 VPN service, the controller automatically deletes and re-creates the rules associated with this L3 VPN service in the OpenFlow tables of CPE devices. This affects CPE devices whose service interfaces are added to the L3 VPN service.

To restart an L3 VPN service:

  1. In the menu, go to the Infrastructure section.

    This opens the resource management page. By default, the Network resources tab is selected, which displays the table of controllers.

  2. Click Management → Configuration menu next to the controller.
  3. Go to the L3 VPN services section.

    A table of L3 VPN services is displayed.

  4. Click Management → Reprovision next to the L3 VPN service that you want to reprovision.
  5. In the confirmation window, click Confirm.

The L3 VPN service is restarted.

Page top
[Topic 256681]

Deleting an L3 VPN service

Deleted L3 VPN services cannot be restored.

To delete an L3 VPN service:

  1. In the menu, go to the Infrastructure section.

    This opens the resource management page. By default, the Network resources tab is selected, which displays the table of controllers.

  2. Click Management → Configuration menu next to the controller.
  3. Go to the L3 VPN services section.

    A table of L3 VPN services is displayed.

  4. Click Management → Delete next to the L3 VPN service that you want to delete.
  5. If you want to delete the service interfaces added to the L3 VPN service, select the Delete associated service interfaces check box in the confirmation window. This check box is cleared by default.
  6. Click Delete.

The L3 VPN service is deleted and is no longer displayed in the table.

Page top
[Topic 256680]