Add and Deploy SD-WAN Policy Intents

By default, CSO provides predefined SD-WAN policy intents, which reference predefined SLA-based steering profiles. These policy intents are applicable to all sites and can be deployed to the branch sites or enterprise hub sites of a tenant. You can also modify these intents based on your network requirements or delete them if you don’t want to use the predefined intents.

CSO also allows you to add customized intents that reference path-based steering profiles, SLA-based steering profiles, and SD-WAN breakout profiles, and then deploy the intents to the branch sites or enterprise hub sites of a tenant.

For example, if you enable local breakout on a WAN link of an enterprise hub site, you can add an SD-WAN breakout profile, reference that breakout profile in an SD-WAN policy intent, and then deploy the SD-WAN policy intent, which ensures that traffic will break out locally from the WAN link that you configured for local breakout.

Note:

SD-WAN Essentials service does not support department level policy intents or SLA-based steering profiles.

To add and deploy an SD-WAN policy intent:

Add the SD-WAN policy intent:
1. Select Configuration > SD-WAN > SD-WAN Policy.
  The SD-WAN Policy page appears.
2. Click the add icon (+).
  The parameters for an SD-WAN policy intent appear inline on the SD-WAN Policy page.
3. Enter the policy intent information according to the guidelines provided in Table 1.
4. Click Save.
  The SD-WAN policy intent is added, and a confirmation message is displayed. The Undeployed field is incremented by one, indicating that the policy intent must be deployed.
Deploy the SD-WAN policy intent:
1. Click the Deploy button.
  The Deploy page appears.
2. From the Choose Deployment Time field:
  - Select Run now to deploy the policy immediately.
  - Select Schedule at a later time to schedule the deployment for later.
    
    If you schedule the deployment for later, enter the date (in MM/DD/YYYY format) and time (in HH:MM:SS 24-hour or AM/PM format) at which you want the deployment to be triggered. You specify the time in the local time zone of the client from which you access the CSO GUI.
You are returned to the SD-WAN Policy page, and a job to deploy the policy is triggered. You can check the status of the deployment on the Jobs page (Monitor > Jobs).

After the SD-WAN policy is successfully deployed:
- For intents that reference steering profiles, the profile parameters are applied to the traffic that matches the intent.
- For intents that reference breakout profiles, traffic can break out directly from the sites or departments that match the intent.

Table 1: SD-WAN Policy Intent Settings
Field	Guideline
Name	Enter a name for the policy intent, or use the name generated by CSO.
Description	Enter a description for the policy intent.
Source	Select one or more of the following source endpoints: Site Site Group Department By default, All Sites is selected as the source endpoint, which means that the SD-WAN policy intent is applicable to all spoke and enterprise hub sites in the tenant.
Application	For an SD-WAN policy intent that references a steering profile, select the applications or application groups to which you want the steering profile parameters to be applied to the traffic. For an SD-WAN policy intent that references a breakout profile, select the applications or application groups for which you want to break out traffic. Note: The option Any, which means that this policy intent is applicable to all applications, can be used only if you specify a breakout profile. For example, if you want all guest traffic to break out to the Internet through the underlay, you can select the guest department as the source and select Any as the application.
Traffic Steering Profile	Click inside the text box, and select one of the following depending on the traffic for which you plan to apply the intent: SLA-based steering profile Path-based steering profile Breakout profile

See Post-Provisioning Tasks for Enterprise Hub and SD-WAN Spoke Sites.