- play_arrow Introduction
- About the Administration Portal User Guide
- Administration Portal Overview
- Administration Portal Tasks for SP Administrators And OpCo Administrators
- Accessing Administration Portal
- Personalize the Administration Portal
- Switching the Tenant Scope
- About the Administration Portal Dashboard
- Changing the Administration Portal Password
- Resetting Your Password
- Configuring Two-Factor Authentication
- Resend Activation Link in Administration Portal
- Changing the Password on First Login
- Resetting the Password for OpCo and Tenant Users
- Setting Password Duration
- Extending the User Login Session
- About the Display Preferences
- Add a Theme in Administration Portal
- Apply or Modify a Theme
- Upload a Custom Font
- play_arrow Managing E-Mail
- play_arrow Managing Authentication
- play_arrow Managing Tenants
- Tenant Overview
- Full Mesh Topology Overview
- Understanding Specific Route-based Routing Within the SD-WAN Overlay
- About the Tenants Page
- Adding a Single Tenant
- Edit Tenant Parameters
- Importing Data for Multiple Tenants
- Allocating Network Services to a Tenant
- Viewing the Create History of Imported Tenant Data
- Delete a Tenant
- Viewing the History of Deleted Tenant Data
- Dynamic Mesh Tunnels Overview
- Configuring Dynamic Mesh Tunnel Thresholds for all Tenants
- Updating the Terms of Use
- play_arrow Managing Operating Companies
- play_arrow Managing Resources
- About the POPs Page
- Creating a Single POP
- Importing Data for Multiple POPs
- Viewing the History of POP Data Imports
- Viewing the History of POP Data Deletions
- View the History of Device Data Deletions
- Manually Importing Provider Hub Sites
- About the Tenant Devices Page
- About the Provider Hub Devices Page
- Add a Provider Hub Device
- Edit Provider Hub Site Parameters
- Manage a Provider Hub Device
- Upgrade a Provider Hub Device
- Delete a Provider Hub Site
- Perform Return Material Authorization (RMA) for a Provider Hub Device
- Grant Return Material Authorization (RMA) for a Provider Hub Device
- Generate Device RSI for Provider Hub Devices
- Managing a Tenant Device
- Device Redundancy Support Overview
- Viewing the History of Tenant Device Activation Logs
- Secure OAM Network Overview
- Secure OAM Network Redundancy Overview
- Rebooting Tenant Devices and Provider Hub Devices
- Identifying Connectivity Issues by Using Ping
- Identifying Connectivity Issues by Using Traceroute
- Remotely Accessing a Device CLI
- Device Template Overview
- Multi-Service Shared Bearer Overview
- About the Device Template Page
- Cloning a Device Template
- Importing a Device Template
- Configuring Template Settings in a Device Template
- Updating Stage-2 Configuration Template in a Device Template
- Configuring Stage-2 Initial Configuration in a Device Template
- Modifying a Device Template Description
- Deleting a Device Template
- Configuration Templates Overview
- Configuration Templates Workflow
- About the Configuration Templates Page
- Predefined Configuration Templates
- Edit, Clone, and Delete Configuration Templates
- Deploy Configuration Templates to Devices
- Undeploy a Configuration Template from a Device
- Dissociate a Configuration Template from a Device
- Preview and Render Configuration Templates
- Import Configuration Templates
- Export a Configuration Template
- Assign Configuration Templates to Device Templates
- Add Configuration Templates
- Jinja Syntax and Examples for Configuration Templates
- View the Configuration Deployed on Devices
- APN Overview
- Configuring APN Settings on CPE Devices
- Device Images Overview
- About the Device Images Page
- Staging an Image
- Deploying Device Images to Devices
- Uploading a Device Image
- Deleting Device Images
- Network Services Overview
- About the Network Services Page
- About the Service Overview Page
- About the Service Instances Page
- Allocating a Service to Tenants
- Removing a Service from Tenants
- play_arrow Managing Signatures
- Signature Database Overview
- About the Signature Database Page
- Downloading a Signature Database
- Download Locations for Signature Database
- Application Signatures Overview
- About the Application Signatures Page
- Understanding Custom Application Signatures
- Adding Application Signatures
- Editing, Cloning, and Deleting Application Signatures
- Adding Application Signature Groups
- Editing, Cloning, and Deleting Application Signature Groups
- play_arrow Managing Licenses
- play_arrow Managing Users and Roles
- Role-Based Access Control Overview
- About the Users Page in Administration Portal
- Add Service Provider and OpCo Users
- Edit and Delete Service Provider Users and OpCo Users
- Resetting the Password for Service Provider, OpCo, and Tenant Users
- Roles Overview
- About the Roles Page
- Add User-Defined Roles for Service Provider, OpCo, and Tenant Users
- Edit, Clone, and Delete User-Defined Roles for Service Provider, OpCo, and Tenant Users
- Access Privileges for Role Scopes (Operating Company and Tenant)
- play_arrow Managing Jobs
- play_arrow Managing Audit Logs
- play_arrow Monitoring
- About the Monitor Overview Page
- Alerts Overview
- About the Generated Alerts Page
- About the Alert Definitions/Notifications Page
- Creating and Managing Security Alerts
- About the Alarms Page
- BGP Alarms on Provider Hubs
- Monitoring Support for LTE Links on Dual CPEs
- Enable E-mail Notifications for SD-WAN Alarms
- Rogue Device Detection
- Multitenancy
- About the SLA Performance of All Tenants Page
- About the SLA Performance of a Single Tenant Page
- Monitoring Application-Level SLA Performance for Secure SD-WAN-Advanced
- Viewing the SLA Performance of a Site
- Viewing the SLA Performance of an Application or Application Group
- Understanding SLA Performance Score for Applications, Links, Sites, and Tenants
- Syslog Streaming
Adding SLA-Based Steering Profiles
You can use the Add SLA Profile page to add a new service-level agreement (SLA)-based steering profile, specify the traffic type profile, SLA configuration, SLA threshold, SLA parameters, path selection criteria, and rate limiting parameters for the profile. Table 1 lists the SLA-based steering profiles that are tuned for specific application categories and traffic types.
SLA-Based Steering Profiles | Traffic Type | Application Group | Applications Supported |
---|---|---|---|
CSO-AV | VOICE-VIDEO | CSO_Collaboration_AV | Skype for Business Zoom Video GotoMeeting Jive Jabber Citrix Online WebEx Zoho Meeting Google Hangout Adobe Connect |
CSO-Productivity | PREMIUM-INTERNET | CSO_Productivity | ERP: Salesforce, Oracle, SAP Office365 (including SharePoint) Zendesk HRPayroll Zoho Office Suite Slack Square Concur Adobe Quickbooks Freshbooks Workday Project Management-MS PJ Basecamp Asana |
CSO-Security | INTERNET | CSO_Security | Symantec McAfee Sophos Zonealarm Lookout |
CSO-Email | PREMIUM-INTERNET | CSO_Collaboration_Email | MS Exchange IMAP POP3 Gmail OWA Yahoo |
CSO-FileShare | INTERNET | CSO_File_Share | Box Dropbox Gsuite OneDrive Skype for Business-File Transfer Zoho Share |
Tenants with the Secure SD-WAN Essentials service do not support SLA-based steering profiles.
To add an SLA-based steering profile:
Field | Guidelines |
---|---|
General | |
Name | Enter a unique string that can contain alphanumeric characters and hyphens (-); the maximum length is 15 characters. |
Traffic Type Profile | Choose a traffic type profile to apply the class-of-service configuration and priority to the SLA profile. You can select a traffic type profile only when it is in the Enabled state. |
SLA Configuration | Choose one of the following options:
|
SLA Threshold | Choose one of the following options:
|
SLA Parameters | |
Packet Loss | Enter the target packet loss (in %) for the SLA-based steering profile. Packet loss is the percentage of data packets dropped by the network to manage congestion. |
RTT | Enter the target round-trip time (RTT) for the SLA-based steering profile. |
Jitter | Enter the target jitter (in ms) for the SLA-based steering profile. Jitter is the difference between the maximum and minimum round-trip times of a packet of data. |
Path Selection Criteria | |
Path Preference | Select the preferred WAN link type (MPLS, Internet, or Any) to associate with the SLA profile. Any is the default value. If a WAN link type that matches the preferred path is enabled, then that WAN link type is used for all traffic from the site. If you specify that any path can be used, then there is no preference and all traffic-enabled links are used in a load-balancing mode. |
Strict Affinity | This field is displayed only if you select MPLS or Internet as the path preference. Enable the toggle button to use strict link affinity. For strict link affinity, AppQoE ensures that the path selected is always of the preferred link type. If the preferred link does not meet the SLA, then the traffic remains on the preferred link with the status as SLA not met. If multiple links of the preferred link type are available, then the traffic selects the link that has the highest priority and meets the SLA. If the link affinity is not strict and if SLA meeting links belonging to the preferred link type are not available, then AppQoE selects a link outside the preferred link type that meets the SLA requirements. If multiple links meeting the SLA are available, then the traffic switches over to the link with the highest priority. If the traffic switches over to a non-preferred link type, then the traffic automatically reverts to the preferred link when the preferred link recovers and conforms to the SLA. |
Path Failover Criteria | Specify the failover criteria to determine how links are switched when the active links fail to meet the SLA criteria. In such cases, the traffic is routed to links that meet SLA criteria. Choose one of the following options:
|
Advanced Configuration- | |
Rate Limiting | |
Maximum Upstream Rate | Enter the maximum upstream rate (in Kbps) for all applications associated with the SLA profile. Range: 64 through 10,485,760 Kbps |
Maximum Upstream Burst Size | Enter the maximum upstream burst size (in bytes). Range: 1 through 1,342,177,280 bytes |
Maximum Downstream Rate | Enter the maximum downstream rate (in Kbps) for all applications associated with the SLA profile. Range: 64 through 10,485,760 Kbps |
Maximum Downstream Burst Size | Enter the maximum downstream burst size (in bytes). Range: 1 through 1,342,177,280 |
Loss Priority | Select a loss priority based on which packets can be dropped or retained when network congestion occurs. The chances of a packet getting dropped is the highest when the loss priority is set to High. Other available values are Medium High, Medium Low, and Low. |
Real Time Optimized Mode Setting Note: The following fields are applicable only for sites configured with the real-time-optimized SD-WAN mode. | |
SLA Sampling | |
Session-sampling % | Enter the matching percentage of sessions for which you want to run the passive probes. |
SLA-violation-count | Enter the number of SLA violations after which you want CSO to switch paths. The range is 1 through 32. |
Sampling-period | Enter the sampling period, in seconds, for which the SLA violations are counted. The range is 2 through 60. |
Switch-cool-off-period | Enter the waiting period, in seconds, only after which you want the link switch to happen if an active link comes back online. This parameter helps prevent frequent switching of traffic between active and backup links. The range is 5 through 300. |
Note: If you do not specify the Switch-cool-off-period and SLA-violation-count parameters, the traffic does not automatically revert to the preferred link when the preferred link comes back online after an SLA violation. |