{{ secondMenu.name }}
The SDWAN function is an update of the original Sangfor VPN multi-lines, which increases the QOE identification by service classification to the specified link and link quality, supports the designated key services to take the designated line, or selects the optimal line according to the link quality.
Main SDWAN functions:
It supports three routing modes. If the peer device has no routing, the path is wan1-wan1 by default. Otherwise, the optimal path is preferred (If the line label is not configured, it should be processed as per the wan1-wan1 by the same ISP).
a)Specified path: Select a path according to the LAN service. It is often used in video conferencing services or some services that have some requirement for lines.
b)Residual bandwidth load: The connection is allocated according to the idle bandwidth ratio of the real-time line. It is often used for file uploading or downloading services and services with fewer requirements for line quality.[LCH255]
c)Service Priority: Select the top-quality line based on the real-time quality of the line. It is often used for services that have high requirements for line quality.
Before configuring the SDWAN Path Selection, you must complete the Multi-line Options first.
The default Global line selection policy cannot be deleted. Add a new SDWAN Path Selection policy:
Name: Define the name of the policy, which can be customized to strengthen memory and deepen understanding.
LAN Service: Select the LAN service that activates the line.
Mode: You can choose Specified or Multiline Options.
Prioritize the use of the preferred. If the preferred path is busy or fails, it attempts to match the next one after it.
For example, the headquarters and branches have the specified and VPN links. The video conference will select the specified path, while other services will use VPN paths.
If Line 1 is the static Internet IP and Line 2 is the specified path, the devices wan1 and wan2 correspond to Line 1 and Line 2.
In this way, the branch can use the specified path to have a video conference with the headquarters through the VPN. Others in the VPN tunnel go through the Internet line to guarantee the video conference traffic.
Notes on path selection:
1. Paths of the same ISP will be chosen preferentially
2. If all the specified paths are busy or fail, it will choose the optimal one from the remaining lines
3.11.3.3.2.1 Based on Bandwidth Ratio
The headquarters and the branch have two VPN links. The branch accesses the headquarters' service according to the dynamic loads based on the residual bandwidth.
1. Through the check, the flow rate displayed by the VPN detailed connection information is lower than the configured bandwidth because the VPN will be encrypted, and the data packet will be added with the VPN header field.
2. The current version does not display the status of each connection line in the foreground. The tool cannot control the flow rate of each TCP connection, so it only can be seen that two lines are fully loaded with bandwidth in the foreground.
3. It only supports multi-connection loads, not single-connection loads.
3.11.3.3.2.2 Prefer the Optimal Path
The headquarters and the branch have two VPN links. The branch accesses headquarters services according to the path selection based on the link quality.
1. The delay statistics of the detailed connection information line will have an error of less than 5ms; the out-of-order packets will be counted into the packet loss rate, so sometimes the packet loss rate value will be displayed without the packet loss, which may be due to the out-of-order packet.
2. When the link quality changes, the current connection information will not perform the path selection, and only the newly-built connection will perform the path selection.
Under the SDWAN Path Selection, the service priority is classified into five levels: Highest, High, Medium, Low, and Lowest. SDWAN performs traffic control (QoS priority) on data through service priority.
For the usage scenario, the headquarters and the branch have two VPN links: ISP1 and ISP2. Generally, the branch accesses the headquarters' service according to the dynamic load based on the residual bandwidth. Thus, when the video conference needs traffic, the traffic of the video conference is guaranteed preferentially.
[ZY256]
{{ $t('index.defaultHeader.chromeBrowserTip') }}