SDWAN: VeloCloud Business Policy rules:- 


Priority:-
=====
++used only when the congestion of the links happens
then it sends traffic based on high,medium and low priority.
Rate Limit:-
==========
its like strict policing, like using 10% for skype traffic

network service:-
================
Direct:-
I dont want to use MultipleLinks, send it directly.(ex:- Guest traffic)
PC-----VCE---->internet---->no VCG
Policy rules:-
1)any any Direct
Branch1#ping branch2(dyn br-br) ===>encrypted==>IP>UDP>DATA
Branch1#ping 8.8.8.8 =>with/without-backhaul===>unencrypted=>IP>ICMP =>sends to isp directly

2)any any Multipath
ping branch2(dyn br-br) ===>encrypted==>IP>UDP>DATA
ping 8.8.8.8 ===no backhaul >encrypted==>IP>UDP>DATA (a)sends to VCG =unencrypted==>to isp

NOTE:-We encapsulate the traffic in VCMP, but we do not encrypt it.

Multi-Path:-
DMPO
PC-----VCE--->internet---->VCG(NAT)---->internet
 it's impossible to make a first packet decision because a SYN is insufficient, for instance, to tell that the application is Skype and thus we need a few packets to classify the application.

For Example, in your case
We set a rule saying Skype must go Multipath
First packet matches one of the business policy (Default internet -other for eg.) and goes direct. Packet has not been identified as Skype at this point.
Once Skype application is identified, the flow is maked as APP_SKYPE but still goes direct so as to not break the call
The next time someone makes a Skype call to the same destination IP and port, it will match the multipath Skype rule and send the traffic via the Gateway.

The best practice is generally always to use the multipath technology and let the system decide the path for traffic to take.


Cloud proxy:-
send it to Cloud for web filter.
Back haul:-
redirect to HUBS(datacenters)

Link steering:-(Latency,Jitter,Packet loss)
==============
Auto:-
Automatically it selects best link

Transport Groups:-
    1)Mandatory:- mandatorily uses configured link even if link fails or (LJP occurs) it will NOT FAILOVER.
    2)Predefined:-Uses configured Link, if links fails or (LJP occurs) it will FAILOVER to other link
    3)Available:- Uses configured Link, If link fails It will FAILOVER. If (LGP occurs) it will NOT FAILOVER ...

Interface:-
we can select any Exit interface

WANLink:-
can select any WAN link like comcast,Airtel,QWEST.....

Service Class:- (3*3 matrix, both priority and service class)
==============
real time:-
For real time applications like voice, video (skype video, youtube etc..)


0 Response to " "

Post a Comment

Powered by Blogger