Configure BFD for Gateways

You can configure BFD Settings for SD-WAN Gateways over IPSec tunnels.

To configure BFD settings for a Gateway:

Prerequisites

Ensure that you have configured the following:

• Create a Non SD-WAN Destination via Gateway for one of the following sites:
  • AWS VPN Gateway
  • Cisco ISR
  • Generic IKEv1 Router
  • Generic IKEv2 Router
  • Microsoft Azure Virtual Hub
• Associate the Non SD-WAN Destination to a Profile See Configure a Tunnel Between a Branch and a Non SD-WAN Destinations via Gateway.

Procedure

1. In the Enterprise portal, click Configure > Network Services.
2. In the Non SD-WAN Destinations via Gateway area, click the Edit link in the BFD column that corresponds to the Non SD-WAN Destination.
   
3. In the BFD Editor window, click the slider to ON to configure the BFD settings for the Primary and Secondary Gateways.
   Note: The Secondary Gateway option is available only if you have configured a secondary Gateway for the corresponding Non SD-WAN Destination.
   
   1. Peer Address – Enter the IP address of the remote peer to initiate a BFD session.
   2. Local Address – Enter a locally configured IP address for the peer listener. This address is used to send the packets.
   3. Multihop – This option is not supported for the Gateways.
   4. Detect Multiplier – Enter the detection time multiplier. The remote transmission interval is multiplied by this value to determine the detection timer for connection loss. The range is from 3 to 50 and the default value is 3.
   5. Receive Interval – Enter the minimum time interval, in milliseconds, at which the system can receive the control packets from the BFD peer. The range is from 300 to 60000 milliseconds and the default value is 300 milliseconds.
   6. Transmit Interval – Enter the minimum time interval, in milliseconds, at which the local system can send the BFD control packets. The range is from 300 to 60000 milliseconds and the default value is 300 milliseconds.
   Note: BFD is supported only on VTP Tunnels.