Citrix NetScaler EE, Руководство по установке и настройке

Страница: 223 / 1026

© 1999-2017 Citrix Systems, Inc. All rights reserved. p.223 https://docs.citrix.com
Configuring Virtual WAN Service
Oct 04, 2016
The SD-WAN configuration describes and defines the topology of your SD-WAN network. Before you can deploy a SD-
WAN network, you must define the Virtual WAN configuration. To do this, use Configuration Editor in the SD-WAN
Management Web Interface on the MCN appliance.
Security and Encryption
Enabling encryption for SD-WAN (for the Virtual Paths) is optional. Instructions for configuring this feature are provided in
the section,
Enabling and Configuring Virtual WAN Security and Encryption (Optional) .
When encryption is enabled, SD-WAN uses the Advanced Encryption Standard (AES) to secure traffic across the Virtual
Path. Both AES 128 and 256 bit ciphers (key sizes) are supported by the SD-WAN Appliances, and are configurable options.
You can select, enable, and configure these and the other encryption options by using the Configuration Editor in the
Management Web Interface on the Management Control Node (MCN). You must have administrative access on the MCN
to modify the configuration, and to distribute your changes across the SD-WAN network. Once the MCN is secured, the
encryption settings and their distribution are also secure.
Authentication between sites functions by means of the Virtual WAN Configuration.
The network configuration has a secret key for each site. For each Virtual Path, the network configuration generates a key
by combining the secret keys from the sites at each end of the Virtual Path. The initial key exchange that occurs after a
Virtual Path is first set up, is dependent upon the ability to encrypt and decrypt packets by means of that combined key.
Enabling Virtual WAN Service
If this is an initial installation and configuration, as a final step you will need to manually enable the Virtual WAN Service on
each SD-WAN appliance in your network. Enabling the service enables and starts the Virtual WAN daemon.
Note
If you are reconfiguring an existing deployment, the MCN automatically enables the service when it distributes the updated
Appliance Packages to the client sites. In this case, you can skip this final step.
To manually enable the Virtual WAN Service on an appliance, do the following:
1. Log into the Management Web Interface on the appliance you want to activate.
2. Select Configuration tab.
3. In the navigation pane, open the Virtual WAN branch and select Enable/Disable/Purge Flows.
If the Virtual WAN Service is currently disabled, this displays the Enable Virtual WAN Service page, as shown below. If
the service is already enabled, this displays the Enable/Disable/Purge Flows page.