- play_arrow Introduction
- About the Administration Portal User Guide
- Administration Portal Overview
- Administration Portal Tasks for SP Administrators And OpCo Administrators
- Accessing Administration Portal
- Personalize the Administration Portal
- Switching the Tenant Scope
- About the Administration Portal Dashboard
- Changing the Administration Portal Password
- Resetting Your Password
- Configuring Two-Factor Authentication
- Resend Activation Link in Administration Portal
- Changing the Password on First Login
- Resetting the Password for OpCo and Tenant Users
- Setting Password Duration
- Extending the User Login Session
- About the Display Preferences
- Add a Theme in Administration Portal
- Apply or Modify a Theme
- Upload a Custom Font
- play_arrow Managing E-Mail
- play_arrow Managing Authentication
- play_arrow Managing Tenants
- Tenant Overview
- Full Mesh Topology Overview
- Understanding Specific Route-based Routing Within the SD-WAN Overlay
- About the Tenants Page
- Adding a Single Tenant
- Edit Tenant Parameters
- Importing Data for Multiple Tenants
- Allocating Network Services to a Tenant
- Viewing the Create History of Imported Tenant Data
- Delete a Tenant
- Viewing the History of Deleted Tenant Data
- Dynamic Mesh Tunnels Overview
- Configuring Dynamic Mesh Tunnel Thresholds for all Tenants
- Updating the Terms of Use
- play_arrow Managing Operating Companies
- play_arrow Managing Signatures
- Signature Database Overview
- About the Signature Database Page
- Downloading a Signature Database
- Download Locations for Signature Database
- Application Signatures Overview
- About the Application Signatures Page
- Understanding Custom Application Signatures
- Adding Application Signatures
- Editing, Cloning, and Deleting Application Signatures
- Adding Application Signature Groups
- Editing, Cloning, and Deleting Application Signature Groups
- play_arrow Managing Profiles
- Application Quality of Experience Overview
- Configure and Monitor Application Quality of Experience
- About the Application Traffic Type Profiles Page
- Predefined Application Traffic Type Profiles
- Add Traffic Type Profiles
- Edit and Delete Application Traffic Type Profiles
- SLA Profiles and SD-WAN Policies Overview
- About the SLA-Based Steering Profiles Page
- Adding SLA-Based Steering Profiles
- Editing and Deleting SLA-Based Steering Profiles
- About the Path-Based Steering Profiles Page
- Adding Path-Based Steering Profiles
- Editing and Deleting Path-Based Steering Profiles
- About the Breakout Profiles Page
- Adding Breakout Profiles
- Editing and Deleting Breakout Profiles
- play_arrow Managing Licenses
- play_arrow Managing Users and Roles
- Role-Based Access Control Overview
- About the Users Page in Administration Portal
- Add Service Provider and OpCo Users
- Edit and Delete Service Provider Users and OpCo Users
- Resetting the Password for Service Provider, OpCo, and Tenant Users
- Roles Overview
- About the Roles Page
- Add User-Defined Roles for Service Provider, OpCo, and Tenant Users
- Edit, Clone, and Delete User-Defined Roles for Service Provider, OpCo, and Tenant Users
- Access Privileges for Role Scopes (Operating Company and Tenant)
- play_arrow Managing Jobs
- play_arrow Managing Audit Logs
- play_arrow Monitoring
- About the Monitor Overview Page
- Alerts Overview
- About the Generated Alerts Page
- About the Alert Definitions/Notifications Page
- Creating and Managing Security Alerts
- About the Alarms Page
- Enable E-mail Notifications for SD-WAN Alarms
- Rogue Device Detection
- Multitenancy
- About the SLA Performance of All Tenants Page
- About the SLA Performance of a Single Tenant Page
- Monitoring Application-Level SLA Performance for Secure SD-WAN-Advanced
- Viewing the SLA Performance of a Site
- Viewing the SLA Performance of an Application or Application Group
- Understanding SLA Performance Score for Applications, Links, Sites, and Tenants
Multi-Service Shared Bearer Overview
Contrail Service Orchestration (CSO) supports the provisioning of more than one service on the same physical (bearer) interface for WAN links associated with on-premise SD-WAN spoke sites and enterprise hub sites. In previous CSO releases, each WAN link had to be configured as a separate physical interface. However, from CSO Release 5.1.0 (for on-premise spoke sites) and CSO Release 5.1.1 (for enterprise hub sites), WAN links can be configured as logical interfaces on the same physical interface. Therefore, the same physical interface can be used to carry Internet and MPLS traffic with VLAN separation. The shared bearer (physical interface) supports both full-mesh and hub-and-spoke topologies.
Figure 1 shows an example of a shared bearer topology. There are two WAN links on the CPE device (WAN 0 and WAN 1), which are connected to two PE devices, one on an MPLS network and the other on an Internet network.
In this example, WAN 0 uses the logical interface ge-0/0/#.x, and WAN 1 uses the logical interface ge-0/0/#.y.
Here, ge-0/0/# represents the physical interface, where # represents the port, and x and y represent the logical unit numbers of the physical interface ge-0/0/#. For example, if the physical interface is ge-0/0/3, then the logical interfaces can be ge-0/0/3.10 and ge-0/0/3.11.
Therefore, WAN 0 and WAN 1 share the same physical interface, but are on two separate logical interfaces with VLAN separation.
The interface names might differ based on the device model and the WAN interface configured in the device template.
When the same physical interface is used for multiple WAN links:
CSO supports class of service (CoS) provisioning of the shaping rate at the logical interface level. In previous releases, CoS provisioning of the shaping rate was supported only at the physical interface level. Shaping rate controls the maximum rate at which traffic is allowed to be transmitted on an interface.
CSO supports flexible (mixed) tagging with simultaneous tagged and untagged WAN links for single CPE devices. However, when there are multiple logical interfaces on the same physical interface, there can be only one untagged logical interface and the rest of the interfaces must be tagged. The support for simultaneous tagged and untagged logical interfaces on same physical interface is not available on dual CPE devices. Table 1 displays the VLAN tagging support for single and dual CPE devices.
To enable the configuration of WAN links as logical interfaces in enterprise hub and on-premise SD-WAN spoke sites, the administrator users must modify the device template and configure the WAN ports as logical interfaces. See Configuring Template Settings in a Device Template.
Type of CPE | VLAN Tag | Unique Physical Interface for Each WAN Link | Same Physical Interface for More Than One WAN Link |
|---|---|---|---|
Single CPE | Untagged | Supported | Supported. However, only one WAN link can be untagged. |
Single CPE | Tagged | Supported | Supported |
Dual CPE | Untagged | Supported | Not supported |
Dual CPE | Tagged | Supported | Supported |
