Configure BFD for Gateways

You can configure BFD Settings for SD-WAN Gateways over IPsec tunnels.

To configure BFD settings for a Gateway:

Prerequisites

Ensure that you have configured the following:

• Create a Non SD-WAN Destination via Gateway for one of the following sites:
  • Configure a Non SD-WAN Destination of Type AWS VPN Gateway
  • Configure a Non SD-WAN Destination of Type Cisco ISR
  • Configure a Non SD-WAN Destination of Type Generic IKEv1 Router (Route Based VPN)
  • Configure a Non SD-WAN Destination of Type Generic IKEv2 Router (Route Based VPN)
  • Configure a Non SD-WAN Destination of Type Microsoft Azure Virtual Hub
• Associate the Non SD-WAN Destination to a Profile See Configure a Tunnel Between a Branch and a Non SD-WAN Destinations via Gateway.

Procedure

1. In the SD-WAN Service of the Enterprise portal, click Configure > Network Services.
2. In the Non SD-WAN Destinations via Gateway area, click the Edit link in the BFD column that corresponds to the Non SD-WAN Destination.
   
3. In the BFD Editor window, move the BFD Activated slider to the right to turn it on to configure the BFD settings for the Primary and Secondary Gateways.
4. Configure the BFD settings, as described in the table below.
   Note: The Secondary Gateway option is available only if you have configured a secondary Gateway for the corresponding Non SD-WAN Destination.
   

   Field	Description
   Peer Address	Enter the IP address of the remote peer to initiate a BFD session.
   Local Address	Enter a locally configured IP address for the peer listener. This address is used to send the packets.
   Multihop	This option is not supported for the Gateways.
   Detect Multiplier	Enter the detection time multiplier. The remote transmission interval is multiplied by this value to determine the detection timer for connection loss. The range is from 3 to 50 and the default value is 3.
   Receive Interval	Enter the minimum time interval, in milliseconds, at which the system can receive the control packets from the BFD peer. The range is from 300 to 60000 milliseconds and the default value is 300 milliseconds.
   Transmit Interval	Enter the minimum time interval, in milliseconds, at which the local system can send the BFD control packets. The range is from 300 to 60000 milliseconds and the default value is 300 milliseconds.

   Note: BFD is supported only on VTP Tunnels.