Creating SD-WAN Policy Intents

Source

You can select the source endpoints in one of the following ways:

Click the + box under the Source field and then,

• Select source endpoints from the displayed list of IP addresses or IP address range, departments, sites, or site groups, or a combination of these. Click the source endpoints to select them.

  Note:

  • If you are selecting an IP address, you must also select a specific site (not All Sites) or department (or both).
  • The options Any-IPv4 and Any-IPv6 do not apply to SD-WAN policy deployments.

• Select the source endpoints from the complete list of IP addresses or IP address range, departments, sites, and site groups.

  To view the complete list of IP addresses or IP address range, departments, sites, and site groups.

  1. Click View more results. The complete list of departments, sites, and site groups is displayed in the End Points pane on the right.

  2. (Optional) Hover over a department or site group and click the edit icon to edit the department or site group. You cannot edit a site.

  3. Click the add icon (+) to select the endpoint.

• Start typing the endpoint name in the Source field. As you type, the filtered list of source endpoints is displayed. You can click the displayed source endpoint to select it.

• Create IP addresses, site groups, or departments to select the source endpoint from the newly created site group or department.

  To create addresses, site groups, or departments:

  1. Click anywhere within the Source field.

  2. Click the lesser-than icon (<) on the right.

     The list of available departments, sites, and site groups is displayed in the End Points pane on the right.

  3. (Optional) To view more information about a source endpoint, hover over the endpoint click the details icon.

  4. Click the add icon (+) on the top right of the pane.

  5. Click Address, Department, or Site Group as needed. The Add Department page or Create Site Group page appears based on your selection. See Creating Addresses or Address Groups, Add a Department, and Creating Site Groups for information about creating the endpoints.

  6. Click the check mark icon (√) if you want to save the department or site group to the policy intent.

     Alternatively, if you want to discard your updates, click Cancel instead.

Destination/Application

You can select the application endpoints in one of the following ways:

Click in the + box under the Destination/Application field and then,

• Select Destination/Application endpoints from the displayed list of addresses, services (Layer 4 applications), applications and application groups (Layer 7 application). Click the endpoints to select them.

  Note:

  Layer 4 applications (services) and Layer 7 applications (applications or application groups) are mutually exclusive. You can choose either the services or the applications in the same intent.

• Select the Destination/Application endpoints from the complete list of applications and application groups.

  To view the complete list of applications and applications groups.

  1. Click View more results. The complete list of applications and applications groups is displayed in the End Points pane on the right.

  2. (Optional) Hover over an application group and click the edit icon to edit the application group.

  3. (Optional) Hover over an application and click the details icon to view details about the application.

  4. Click the add icon (+) to select the endpoint.

• Start typing the endpoint name in the Destination/Application field. As you type, the filtered list of source endpoints is displayed.

• Create custom Destination/Application endpoints and select them.

  To create a Destination/Application endpoint:

  1. Click anywhere within the Application field.

  2. Click the lesser-than icon (<) on the right.

     The list of available applications, departments, sites, and site groups is displayed in the End Points pane on the right.

  3. Click the add icon (+) on the top right of the pane.

  4. Click Application > Application Signature/Application Signature Group, Address, or Service. See Creating Addresses or Address Groups, Creating Services and Service Groups, Adding Application Signatures, Adding Application Signature Groups for more information about creating the endpoints.

  5. Click the check mark icon (√) if you want to save the application signature group to the policy intent.

     Alternatively, if you want to discard your updates, click Cancel instead.

Traffic Steering Profile

Click the + field under the Traffic Steering Profile field and then select a breakout profile, SLA-based profile, or a path-based profile to apply to the source and application endpoints. You can select the profile in one of the following ways:

• Select the breakout profile, SLA-based profile, or the path-based profile from the displayed list of profiles. Click the profile to select it.

• Select the profile from the complete list of breakout, SLA-based, or path-based profiles:

  To view the complete list of breakout, SLA-based, or path-based profiles.

  1. Click View more results. The complete list of profiles is displayed in the End Points pane on the right.

  2. Click the add icon (+) to select the profile.

• Select the profile by creating a custom SLA-based, path-based, or breakout profile:

  • To create a traffic steering profile:

    1. Click anywhere within the Traffic Steering Profile field.

    2. Click the lesser-than icon (<) on the right.

    3. Click the add icon (+) on the top right of the pane and select SLA-Based Steering Profiles, Breakout Profiles, or Path-Based Steering Profiles.

       For more information about creating the traffic steering profiles, see Adding Breakout Profiles, Adding SLA-Based Steering Profiles, and Adding Path-Based Steering Profiles.

Options

Name

Enter a name for the policy intent.

Description

Enter a description for the policy intent.