Skip to main content
Versa Networks

Configure WAN Interfaces in Concerto

  1. Last updated
  2. Save as PDF

Versa-logo-release-icon.pngFor supported software information, click here.

A WAN interface is a network interface that connects a device to a wide area network (WAN). WAN interfaces are used to connect to external networks, such as the internet. 

There are two categories for WAN interfaces: WAN and Secondary Device WAN, which is used for high availability deployments.

You can configure the following types of WAN interfaces in each category:

  • DSL
  • Loopback
  • PPPoE
  • VLAN interface—(IRB or SVI)
  • Wired 
  • Wireless (LTE or 5G)

You can configure a WAN interface as part of a main template, or you can configure it separately and then associate it with a main template. For more information about main templates, see Configure Main Templates.

Configure WAN Interfaces

To configure all WAN interfaces and secondary device WAN interfaces in Concerto:

  1. In Tenant view, select Configure > Secure SD-WAN > Network Interfaces.

    SD-WAN-left-nav-Network-Interfaces-border.png

    The following screen displays with the WAN tab selected. WAN interfaces that are already configured are listed here.

    network-interfaces-WAN-v2-border.png
     
  2. Click the add-icon-black-on-white-22.png Add icon. The workflow to configure a WAN Interface displays, beginning with step 1, WAN Settings.
  3. In the Category field, select WAN to configure a WAN interface, or select Secondary Device WAN, which is used for high availability deployments.
  4. From here, you can configure the following sub-categories of WAN interfaces:
    • Loopback
    • PPPoE
    • VLAN Interface (IRB or SVI)
    • Wired 
    • Wireless

The following sections describe how to configure each of the sub-category WAN interfaces.

Configure a Wired WAN Interface

  1. In the Add WAN Interface screen, select the Wired sub-category, and then enter information for the following fields.

    add-WAN-interface-WAN-settings-v2-border.png


    add-WAN-interface-WAN-settings-border.png
     
    Field Description
    Interface

    Select a VNI interface.
    VLAN ID

    Enter a VLAN number. 

    Default: None

    Range: 0 through 4094

     

    Note: For tagged interfaces, use VLAN IDs 1 through 4094. Use VLAN 0 only for an untagged interface. 
    Inner VLAN ID If you entered a VLAN ID, you can also enter an inner VLAN ID in this field.
    Standby

    Use the Standby option to enable or disable standby mode on an interface based on a monitor. Standby is disabled by default. If you click the toggle to Enabled, the following fields appear.

    standby-enabled-border.png

    • IP SLA Monitor Group—Select an IP SLA monitor group.
    • Match Monitor State—Select Up or Down. 
    • Revert Delay (secs)—Enter a value from 1 through 360 seconds.
    Speed Test Server

    Select an option for a speed test server to use the WAN interface:

    • Disabled
    • Enabled
    • Variable—Select this option to parameterize the use of the speed-test server on the interface. Enter a name for the variable, which is a Boolean value. You can then choose whether this interface is enabled or disable on a device-by-device basis in the Deploy lifecycle.
    Internet Control Message Protocol (ICMP)

    Select an option for transmitting ICMP packets over the WAN interface:

    • Disabled—ICMP packets are dropped on the interface.
    • Enabled—ICMP packets are allowed on the interface.
    • Variable—Select this option to parameterize whether or not IMCP packets are allowed or not allowed on the interface. Enter a name for the variable, which is a Boolean value. You can then choose whether this interface is enabled or disable on a device-by-device basis in the Deploy lifecycle.
    Link Configuration (Group of Fields) Define the properties for data transmission on the interface.
    • Speed

    Select a speed option for the interface:

    • Auto
    • 10 Mbps
    • 100 Mbps
    • 1 Gbps
    • 10 Gbps
    • 40 Gbps
    • 100 Gbps
    • Mode

    Select the mode for the interface:

    • Auto
    • Half duplex
    • Full duplex
    • MTU

    Enter the maximum transmission unit (MTU) size, in bytes, of the largest PDU that the interface can receive or transmit.

    Range: 72 through 9000 bytes

    Default: None
  2. Click Next to go to step 2, Connection. See Configure Connections, below. 

Configure a Wireless WAN Interface

  1. In the Add WAN Interface screen, select the Wireless (LTE or 5G) sub-category, and then enter information for the following fields.

    add-wireless-WAN-v2-border.png
     
    Field Description
    Interface

    Select an LTE interface.
    Standby

    Use the Standby option to enable or disable standby mode on an interface based on a monitor. Standby is disabled by default. If you click the toggle to Enabled, the following fields appear.

    standby-enabled-border.png

    • IP SLA Monitor Group—Select an IP SLA monitor group.
    • Match Monitor State—Select Up or Down. 
    • Revert Delay (secs)—Enter a value from 1 through 360 seconds.
    Speed Test Server

    Select an option for a speed test server to use the WAN interface:

    • Disabled
    • Enabled
    • Variable—Select this option to parameterize the use of the speed-test server on the interface. Enter a name for the variable, which is a Boolean value. You can then choose whether this interface is enabled or disable on a device-by-device basis in the Deploy lifecycle.
    Internet Control Message Protocol (ICMP)

    Select an option for transmitting ICMP packets the WAN interface:

    • Disabled—ICMP packets are dropped on the interface.
    • Enabled—ICMP packets are allowed on the interface.
    • Variable—Select this option to parameterize whether or not IMCP packets are allowed or not allowed on the interface. Enter a name for the variable, which is a Boolean value. You can then choose whether this interface is enabled or disable on a device-by-device basis in the Deploy lifecycle.
    Access Point Name (APN) (Group of Fields)

    APN is a setting on mobile devices that allows them to connect to the internet or a mobile network.

    add-wireless-WAN-APN-border.png
    • APN
    		 Enter a name for the access point.
    • PIN
    		 Enter a PIN for the access point.
    • Username
    		 Enter a username to use to access the wireless WAN.
    • Password
    		 Enter a password to use to access the wireless WAN.
  2. Click Next to go to step 2, Connection. See Configure Connections, below. 

Configure a WAN VLAN Interface (IRB or SVI)

To configure a wireless WAN VLAN interface to be either an integrated routing and bridging (IRB) interface or a switched virtual interface (SVI):

  1. In the Add WAN Interface screen, select the VLAN Interface (IRB or SVI) sub-category, and then enter information for the following fields.

    add-WAN-interface-VLAN-IRB-SVI-v2-border.png
     
    Field Description
    Interface (Required)

    Select an IRB interface.

    VLAN ID

    Enter a VLAN ID number.
    Range: 1 through 4094

    Default: None
     

    Note: For tagged interfaces, use VLAN IDs 1 through 4094. Use VLAN 0 only for an untagged interface. 
    Standby

    Use the Standby option to enable or disable standby mode on an interface based on a monitor. Standby is disabled by default. If you click the toggle to Enabled, the following fields appear.

    standby-enabled-border.png

    • IP SLA Monitor Group—Select an IP SLA monitor group. 
    • Match Monitor State—Select Up or Down. 
    • Revert Delay (secs)—Enter a value from 1 through 360 seconds.
    Speed Test Server

    Select an option for a speed test server to use the WAN interface:

    • Disabled
    • Enabled
    • Variable—Select this option to parameterize the use of the speed-test server on the interface. Enter a name for the variable, which is a Boolean value. You can then choose whether this interface is enabled or disable on a device-by-device basis in the Deploy lifecycle.
    Internet Control Message Protocol (ICMP)

    Select an option for transmitting ICMP packets over the WAN interface:

    • Disabled—ICMP packets are dropped on the interface.
    • Enabled—ICMP packets are allowed on the interface.
    • Variable—Select this option to parameterize whether or not IMCP packets are allowed or not allowed on the interface. Enter a name for the variable, which is a Boolean value. You can then choose whether this interface is enabled or disable on a device-by-device basis in the Deploy lifecycle.
  2. Click Next to go to step 2, Connection. See Configure Connections, below. 

Configure PPPoE Interfaces

In a PPPoE session, the device encapsulates each Point-to-Point Protocol (PPP) frame in an Ethernet frame and transports the frames over an Ethernet loop.

To configure a Point-to-Point Protocol over Ethernet (PPPoE) interface:

  1. In the Add WAN Interface screen, select the PPPoE sub-category, and then enter information for the following fields.

    add-WAN-interface-PPPoE-v3-border.png
     
    Field Description
    Interface (Required)

    Select a PPPoE interface.
    Standby

    Use the Standby option to enable or disable standby mode on an interface based on a monitor. Standby is disabled by default. If you click the toggle to Enabled, the following fields appear.

    standby-enabled-border.png

    • IP SLA Monitor Group—Select an IP SLA monitor group. 
    • Match Monitor State—Select Up or Down. 
    • Revert Delay (secs)—Enter a value from 1 through 360 seconds.
    Speed Test Server

    Select an option for a speed test server to use the WAN interface:

    • Disabled
    • Enabled
    • Variable—Select this option to parameterize the use of the speed-test server on the interface. Enter a name for the variable, which is a Boolean value. You can then choose whether this interface is enabled or disable on a device-by-device basis in the Deploy lifecycle.
    Internet Control Message Protocol (ICMP)

    Select an option for transmitting ICMP packets over the PPPoE interface:

    • Disabled—ICMP packets are dropped on the interface.
    • Enabled—ICMP packets are allowed on the interface.
    • Variable—Select this option to parameterize whether or not IMCP packets are allowed or not allowed on the interface. Enter a name for the variable, which is a Boolean value. You can then choose whether this interface is enabled or disable on a device-by-device basis in the Deploy lifecycle.

    VNI Location

    Select a VNI interface.
    VLAN ID

    Enter a VLAN ID number. 
    Range: 0 through 4094

    Default: None

    Note: For tagged interfaces, use VLAN IDs 1 through 4094. Use VLAN 0 only for an untagged interface. 

    PPPoE Parameters (Group of Fields)

    PPPoE uses Point to Point Protocol over Ethernet (PPPoE) to connect to the Internet. Use the necessary PPPoE information from your ISP to complete the PPPoE configuration.

    PPPoE-fields-full-border.png
    • Service Provider Name
    		 Enter the name of the service provider
    • Access Concentrator
    		 Enter the name of the access concentrator. The access concentrator name on both the client and the server must be the same to establish the PPPoE session.
    • Username
    		 Enter a username.
    • Password
    		 Enter a password.
    • LCP Echo Failure

    Enter the number of LCP (Link Control Protocol) echo requests to send without receiving a valid LCP echo reply before assuming that the peer is unreachable (dead).

    • Range: 1 through 255
    • Default: 3
    • LCP Echo Interval

    Enter how often to send LCP echo requests to a peer, in seconds.

    • Range: 1 through 255 seconds
    • Default: 5 seconds
  2. Click Next to go to step 2, Connections. See Configure Connections, below. 

Configure DSL Interfaces

  1. In the Add WAN Interface screen, select the DSL sub-category, and then enter information for the following fields.

    add-WAN-interface-DSL-v2-border.png
     
    Field Description
    Speed Test Server

    Select an option for a speed test server to use the WAN interface:

    • Disabled
    • Enabled
    • Variable—Select this option to parameterize the use of the speed-test server on the interface. Enter a name for the variable, which is a Boolean value. You can then choose whether this interface is enabled or disable on a device-by-device basis in the Deploy lifecycle.
    Internet Control Message Protocol (ICMP)

    Select an option for transmitting ICMP packets over the PPPoE interface:

    • Disabled—ICMP packets are dropped on the interface.
    • Enabled—ICMP packets are allowed on the interface.
    • Variable—Select this option to parameterize whether or not IMCP packets are allowed or not allowed on the interface. Enter a name for the variable, which is a Boolean value. You can then choose whether this interface is enabled or disable on a device-by-device basis in the Deploy lifecycle.

    VCI

    Enter a VCI (Virtual Channel Identifier).

    • Range: 32 through 65535
    • Default: None
    VPI Enter a VPI (Virtual Path Identifier).
    Range: 0 through 256
    Default: None
    Multiplexing Type Select the multiplexing type:
    • llc (Logical Link Control)
    • vcmux (Virtual Circuit Multiplexing)
    VLAN ID

    Enter a VLAN number 
    Range: 0 through 4094
    Default: None

    Note: For tagged interfaces, use VLAN IDs 1 through 4094. Use VLAN 0 only for an untagged interface. 

    PPPoE Parameters (Group of Fields)

    PPPoE uses Point to Point Protocol over Ethernet (PPPoE) to connect to the Internet. Use the necessary PPPoE information from your ISP to complete the PPPoE configuration.

    PPPoE-fields-full-border.png
    • Service Provider Name
    		 Enter the name of the service provider
    • Access Concentrator
    		 Enter the name of the access concentrator. The access concentrator name on both the client and the server must be the same to establish the PPPoE session.
    • Username
    		 Enter a username.
    • Password
    		 Enter a password.
    • LCP Echo Failure

    Enter the number of LCP (Link Control Protocol) echo requests to send without receiving a valid LCP echo reply before assuming that the peer is unreachable (dead).

    • Range: 1 through 255
    • Default: 3
    • LCP Echo Interval

    Enter how often to send LCP echo requests to a peer, in seconds.

    • Range: 1 through 255 seconds
    • Default: 5 seconds
  2. Click Next to go to step 2, Connections. See Configure Connections, below. 

Configure a WAN Loopback Interface

  1. In the Add WAN Interface screen, select the Loopback sub-category, and then enter information for the following fields.

    add-WAN-interfaces-Loopback-v2-full-border.png
     
    Field Description
    Interface

    Select a TVI interface.
    Standby

    Use the Standby option to enable or disable standby mode on an interface based on a monitor. Standby is disabled by default. If you click the toggle to Enabled, the following fields appear.

    standby-enabled-border.png

    • IP SLA Monitor Group—Select an IP SLA monitor group. Click the eye-icon-blue-on-white-22.png Eye icon to display the monitor details.
    • Match Monitor State—Select Up or Down. 
    • Revert Delay (secs)—Enter a value from 1 through 360 seconds.
    Speed Test Server

    Select an option for a speed test server to use the WAN interface:

    • Disabled
    • Enabled
    • Variable—Select this option to parameterize the use of the speed-test server on the interface. Enter a name for the variable, which is a Boolean value. You can then choose whether this interface is enabled or disable on a device-by-device basis in the Deploy lifecycle.
    Internet Control Message Protocol (ICMP)

    Select an option for transmitting ICMP packets the WAN loopback interface:

    • Disabled—ICMP packets are dropped on the interface.
    • Enabled—ICMP packets are allowed on the interface.
    • Variable—Select this option to parameterize whether or not IMCP packets are allowed or not allowed on the interface. Enter a name for the variable, which is a Boolean value. You can then choose whether this interface is enabled or disable on a device-by-device basis in the Deploy lifecycle.
    Link Configuration (Group of Fields) (For wired WAN and Loopback interfaces only.) Define the properties for data transmission on the interface.
    • Speed

    Select a speed option for the interface:

    • Auto
    • 10 Mbps
    • 100 Mbps
    • 1 Gbps
    • 10 Gbps
    • 40 Gbps
    • 100 Gbps
    • Mode

    Select the mode for the interface. The options are:

    • Auto
    • Half duplex
    • Full duplex
    • MTU

    Enter the maximum transmission unit (MTU) size, in bytes, of the largest PDU that the interface can receive or transmit.

    Range: 72 through 9000 bytes

    Default: None
    Physical Interfaces  At least one physical interface is needed for the loopback WAN to be operational.
    • Interface (Required)
    		 Select an interface.
    • VLAN ID

    Enter a VLAN number.
    Range: 0 through 4094

    Default: None

    Note: For tagged interfaces, use VLAN IDs 1 through 4094. Use VLAN 0 only for an untagged interface. 
    • IPv4 Address Assignment

    Select one of the following:

    • None
    • DHCPv4
    • Static—Enter the following:
      • IPv4 Address (Required)
      • IPv4 Nexthop
    • IPv6 Address Assignment

    Select one of the following:

    • None
    • DHCPv6
    • SLAAC (Stateless Address Autoconfiguration)
    • Static—Enter the following:
      • IPv6 Address (Required)
      • IPv6 Nexthop
    add-icon-blue-on-white-22.png Add Another Click to add an additional physical interface. 
  2. Click Next to go to step 2, Connection. See Configure Connections, below. 

Configure Connections

To configure WAN interface connections:

  1. In step 2, Connection, select the Connectivity Info tab, and then enter information for the following fields.

    add-WAN-interface-Connection-step-v3-border.png
     
    Field Description
    General Connectivity Information (Group of Fields)  
    • Connection Type (Required)

    Select the connection type:

    • Broadband
    • MPLS
    • Connection Name (Required)
    		 Select the name of the WAN connection.
    • Connection Tags
    		 Enter a tag for the connection, then press Enter. You can configure multiple tags. A tag is an alphanumeric text descriptor with no spaces or special characters. You can specify multiple tags added for the same object. The tags are used for searching the objects.
    • Connection ID
    		 Enter a connection ID value.
    • Connection Provider
    		 Enter a connection provider value.
    Management Traffic Priority

    Enter the priority for management traffic on this connection, where 0 is lowest priority and 15 is highest priority.

    Range: 0 through 15

    Default: None
    Bandwidth (Group of Fields)  
    • Uplink Bandwidth (Kbps)

    Enter the bandwidth available on the interface for uploading data, in kilobytes per second (Kbps). 

    Range: 1 through 100000000 Kbps

    Default: None
    • Downlink Bandwidth (Kbps)

    Enter the bandwidth available on the interface for downloading data, in kilobytes per second (Kbps). 

    Range: 1 through 100000000 Kbps

    Default: None
    • Adaptive Shaping

    Adaptive shaping protects remote branch devices by ensuring fair, SLA-aware use of shared hub bandwidth and by stopping any single branch device or application from degrading others. 

    Select one of the following options:

    • Disabled—Disable adaptive shaping.
    • Enabled—Enable adaptive shaping.
    • Variable—Create an adaptive shaping variable, then enter a name for the variable.
  2. Select the IPv4 subtab. The following screen displays. IPv4 and DHCPv4 are enabled by default. With DHCPv4 enabled, IPv4 addresses are assigned automatically.

    add-WAN-interface-Connection-IPv4-border.png
     
  3. You can click the toggle to disable IPv4 addresses.

    IPv4-disabled-border.png
     
  4. Click the IPv6 subtab. The following screen displays. IPv6 is disabled by default.
  5. Click the toggle to enable IPv6. DHCPv6 is selected by default. Optionally, you can select SLAAC (Stateless Address Autoconfiguration). IPv6 addresses are automatically generated for both IPv6 and SLAAC.

    add-WAN-interface-IPv6-border.png
     
  6. Click the Connection Monitor subtab. The following screen displays. Disabled is selected by default.
    The connection monitor monitors the status of the WAN connection for issues such as jitter, response time and packet loss. IP SLA monitoring is a method of actively and continuously monitoring traffic across the network and reporting about the traffic.

    add-WAN-interface-Connection-Monitor-border.png
  7. Click Enabled to enable the Connection Monitor, then select Gateway or Custom Monitor under Monitor Settings. Gateway is selected by default.

    Connection-Monitor-enabled-border.png

    If you select Custom Monitor, select an IP SLA monitor from the drop-down list.

    Connection-Monitor-enabled-custom-monitor-border.png
     
  8. Click Variable to create a monitor variable, then enter the name of the variable.

    Connection-Monitor-variable-border.png
     
  9. Click Next to go to Step 3, Quality of Service Scheduler. See Configure the Quality of Service Scheduler, below. 

Configure the Quality of Service Scheduler

You can configure a quality of service (QoS) scheduler to manage the allocation of resources among different applications, services, or users based on their priority levels.

To configure a QoS scheduler:

  1. In the Add LAN Interface screen, select workflow step 3, Quality of Service Scheduler.
  2. Enter information for the following fields.

    add-WAN-interface-QoS-Scheduler-step-v4-full-border.png
    Field Description
    Egress Traffic Shaping Rate (Group of Fields) Apply a traffic scheduler to prioritize egress packets based on traffic class and limit the rate of egress traffic passing through the interface to ensure that the network is not overloaded.
    • Interface Scheduler
    		 Select an interface scheduler. To create a new interface scheduler, select + Create New. For more information, see Configure Reusable Objects.
    • Shaping Rate (Kbps)

    Enter a shaping rate, in Kbps.

    Range: 8 through 100000000

    Default: None
    • Burst Size (Bytes)

    Enter a burst size, in bytes.

    Range: 1000 through 4294967295

    Default: None
    • Rewrite Rule
    		 Select a rewrite rule. To create a new rewrite rule, select + Create New. For more information, see Configure Reusable Objects.
    Ingress Traffic Shaping Rate (Group of Fields) Apply a traffic scheduler to prioritize ingress packets based on traffic class and limit the rate of ingress traffic passing through the interface to ensure that the network is not overloaded.
    • Interface Scheduler
    		 Select an interface scheduler. To create a new interface scheduler, select + Create New. For more information, see Configure Reusable Objects.
    • Shaping Rate (Kbps)

    Enter a shaping rate, in Kbps.

    Range: 8 through 100000000

    Default: None
    • Burst Size (Bytes)

    Enter a burst size, in bytes.

    Range: 1000 through 4294967295

    Default: None

    Rewrite Rule

    		 Select a rewrite rule. To create a new rewrite rule, select + Create New. For more information, see Configure Reusable Objects.
  3. Click Next or select workflow step 4, Tenants. See Configure Tenants, below.

Configure Tenants

You can configure the WAN interface to be used by all tenants, or specify which tenants can use the WAN interface. 

  1. In step 4, Tenants, select one of the following:
    • All Tenants (Default)—Have all the subtenants use the WAN interface. 

      add-WAN-interface-Tenants-step-border.png
    • Specify Tenants and Bandwidth Limits—Specify which tenants can use the WAN interface. The screen displays the parent tenant and all subtenants.

      add-WAN-interface-Tenants-step-bandwidth-v3-border.png
       
  2. To select which tenants can use the WAN interface, click the checkbox next to each tenant that can use the interface. If you select two or more subtenants, you must also select the provider tenant (the appliance-owner tenant). The provider tenant is listed first in the list.
  3. By default, the system automatically allocates bandwidth to the subtenants. To control the amount of bandwidth allocated to each subtenant, click the Specify Bandwidth Limits toggle, then select the tenants for which you will specify the bandwidth limits. Click the Tenants checkbox to select all tenants. The screen displays the following fields.

    add-WAN-interface-Tenants-step-bandwidth-enabled-v3-border.png
     
  4. Enter information for the following fields.
     
    Field Description
    Uplink Shaping Rate (Kbps) Enter the uplink shaping rate in Kbps.
    Downlink Bandwidth (Kbps) Enter the downlink bandwidth in Kbps.
    Egress Scheduler Select an egress interface scheduler. Click + Create New to configure a new egress interface scheduler. For more information, see Configure Reusable Objects.
    Ingress Scheduler Select an ingress interface scheduler. Click + Create New to configure a new ingress interface scheduler. For more information, see Configure Reusable Objects.
  5. To share any excess bandwidth among the subtenants, click the Share Excess Bandwidth toggle to Enabled.

    share-excess-bandwidth-border.png
     
  6. Click Next to go to step 5, Permissions. See Configure Permissions, below. 

Configure Permissions, Review, and Submit the Configuration

  1. In step 5, Permissions, select or unselect permissions for each role, if needed. The permissions allow the users assigned to the role to perform one or more of the following actions:
    • Create—Can create new roles.
    • Read—Can read existing roles.
    • Update—Can read and make changes to roles.
    • Delete—Can delete roles.

      add-WAN-interface-Permissions-step-v3-border.png
       
  2. Click Next to go to step 6, Review & Submit. 
  3. In the General section, enter a name for the interface in the Name field. You can also enter a description and tags. Under the Interface heading, select one of the following:
    • Disabled—Disable the interface
    • Enabled—Enable the interface
    • Variable—Select this option to parameterize whether the interface is enabled or disabled. Enter a name for the variable, which is a Boolean value. You can then choose whether this interface is enabled or disabled on a device-by-device basis in the Deploy lifecycle.

      add-WAN-interface-review-submit-border.png
       
  4. Review the configuration. Click the pencil-icon-blue-on-white-22.png Edit icon in any section to update the settings.
  5. Click Submit to create the interface.

Manage WAN Interface Configurations 

You can perform the following actions on WAN interface configurations:

  • Edit
  • Clone
  • Delete
  • View references
  • Propagate
  • Compare versions
  • View the audit log
  • Enable and disable auto delete

For information about these actions, see Manage SD-WAN Policies and Profiles.

Software Support Information

Releases 13.1.1 and later support all content described in this article.