Implementation method, device and equipment of SDWAN zero-configuration start and medium

Abstract

The embodiment discloses an implementation method, device, equipment and medium of SDWAN zero-configuration start. The method comprises the following steps: a controller creates network policy configuration information of a branch site device; the network policy configuration information is associated with a SIM card to generate an authentication key; first identification information of the controller and the authentication key are written into the SIM card; the SIM card is inserted into a wireless terminal access device CPE, and the CPE device registers online at the controller according to a detected insertion event of the SIM card; the network policy configuration information is sent to the CPE device through the controller, and the CPE device completes zero-configuration online according to the network policy configuration information. The method can greatly simplify the cumbersome process of manual configuration of users, improve the operation efficiency and configuration accuracy, and reduce the error risk of misconfiguration of SDWAN zero-configuration start devices.

Description

Technical Field

[0001] This disclosure relates to the field of network device management technology, and in particular to a method, apparatus, device and medium for implementing SDWAN zero-configuration start. Background Technology

[0002] With the development of Software-Defined Wide Area Networks (SDWAN), more and more industries are adopting this technology, requiring absolute data security. SDWAN typically offers a zero-configuration deployment method. Headquarters personnel need to configure the network access information for branch offices on the controller, and branch office staff can easily complete the deployment and installation of devices for internet access and security protection with simple cooperation.

[0003] The relevant technology uses email to send configuration files to branch offices. Branch offices then complete the device launch by clicking on the email. During this process, staff at the branch sites need to manually connect the wireless terminal access device (CPE) and the computer, and then perform zero-configuration through the received email link. This consumes a lot of manpower and time, resulting in a relatively cumbersome configuration process, low configuration efficiency and accuracy, and a high risk of errors. Summary of the Invention

[0004] In view of this, the present disclosure provides a method, apparatus, device, and medium for zero-configuration deployment of SDWAN. By pre-writing the controller's IP address and authentication key into the SIM card, and using the authentication key written into the SIM card to establish a secure connection and authenticate the wireless terminal access device (CPE), the CPE can read the controller's IP address and authentication key from the SIM card and register with the controller. Users only need to insert the SIM card to complete automatic zero-configuration deployment and network security policy configuration, which greatly simplifies the tedious manual configuration process, improves operational efficiency and configuration accuracy, and reduces the risk of misconfiguring devices during zero-configuration deployment of SDWAN.

[0005] Firstly, this disclosure provides a method for implementing SDWAN zero-configuration deployment, employing the following technical solution:

[0006] Create network policy configuration information for branch site devices in the controller;

[0007] Associate the network policy configuration information with the SIM card to generate an authentication key;

[0008] Write the controller's first identification information and the authentication key into the SIM card;

[0009] The SIM card is inserted into the wireless terminal access device (CPE), and the CPE registers itself online with the controller based on the detected SIM card insertion event.

[0010] The controller sends the network policy configuration information to the CPE device, and the CPE device completes zero-configuration online deployment based on the network policy configuration information.

[0011] In some embodiments, associating the network policy configuration information with a SIM card includes:

[0012] Insert the SIM card into the controller;

[0013] The controller obtains the second identification information of the SIM card;

[0014] Filter the configuration information to be associated from the network policy configuration information;

[0015] The configuration information to be associated is associated with the second identification information of the SIM card.

[0016] In some embodiments, the method includes:

[0017] The integrated circuit card identification code (ICCID) of the SIM card is read according to the instructions of the first SIM module.

[0018] Based on the association relationship between the ICCID and the configuration information to be associated, a universally unique identifier (UUID) is randomly generated.

[0019] A relationship table is created based on the relationship, and the UUID is stored in the relationship table.

[0020] In some embodiments, writing the controller's first identification information and the authentication key into the SIM card includes:

[0021] According to the instructions of the second SIM module, the first identification information of the controller and the authentication key are written into the SIM card by sending an SMS.

[0022] In some embodiments, the SIM card is inserted into a wireless terminal access device (CPE), and the CPE registers online with the controller based on a detected SIM card insertion event, including:

[0023] The CPE device automatically dials a number based on the detected SIM card insertion event;

[0024] Read the first identification information of the controller and the authentication key from the SIM card;

[0025] Based on the first identification information and the authentication key, an authentication request is sent to the controller;

[0026] The controller authenticates the CPE device based on the second identification information of the SIM card and the authentication key in the authentication request;

[0027] When the CPE device is successfully authenticated, a secure connection is established between the CPE device and the controller, and the CPE device is registered online with the controller.

[0028] In some embodiments, the method includes:

[0029] The CPE device detects the SIM card insertion event through the built-in control program of the controller;

[0030] When the control program detects the insertion of the SIM card, it invokes the SIM card to make a dialing call;

[0031] A long-term connection is established between the CPE device and the controller based on the SIM first module instruction, the ICCID, the SIM second module instruction, the first identification information, or the authentication key;

[0032] Based on the long connection, listen for instructions issued by the controller.

[0033] In some embodiments, the network policy configuration information for branch site devices is created in the controller, including:

[0034] The controller creates at least one of the following configuration information for the branch site device: WAN configuration information, LAN configuration information, QoS configuration information, and ACL access control list.

[0035] Secondly, this disclosure also provides an apparatus for implementing SDWAN zero-configuration deployment, employing the following technical solution:

[0036] The configuration information creation unit is configured to create network policy configuration information for branch site devices in the controller.

[0037] The association unit is configured to associate the network policy configuration information with the SIM card and generate an authentication key;

[0038] The writing unit is configured to write the controller's first identification information and the authentication key into the SIM card;

[0039] The registration and online unit is configured to insert the SIM card into a wireless terminal access device (CPE), and the CPE registers and goes online with the controller based on the detected insertion event of the SIM card.

[0040] The zero-configuration deployment unit is configured to send the network policy configuration information to the CPE device through the controller, and the CPE device completes the zero-configuration deployment according to the network policy configuration information.

[0041] Thirdly, this disclosure also provides an electronic device that adopts the following technical solution:

[0042] The electronic device includes:

[0043] At least one processor; and,

[0044] A memory communicatively connected to the at least one processor; wherein,

[0045] The memory stores instructions that can be executed by the at least one processor, which enables the at least one processor to perform any of the above-described methods for implementing SDWAN zero-configuration deployment.

[0046] Fourthly, embodiments of this disclosure also provide a computer-readable storage medium storing computer instructions for causing a computer to execute any of the above-described methods for implementing SDWAN zero-configuration start-up.

[0047] This disclosure provides a method for implementing zero-configuration SDWAN deployment. By pre-writing the controller's IP address and authentication key into a SIM card, the authentication key written into the SIM card is used to establish a secure connection and authenticate the wireless terminal access device (CPE). This allows the CPE to read the controller's IP address and authentication key from the SIM card and register with the controller. Users only need to insert the SIM card to complete automatic zero-configuration deployment and network security policy configuration, greatly simplifying the tedious manual configuration process, improving operational efficiency and configuration accuracy, and reducing the risk of misconfiguring devices during SDWAN zero-configuration deployment.

[0048] The above description is merely an overview of the technical solution disclosed herein. In order to better understand the technical means of this disclosure and to implement it in accordance with the contents of the specification, and to make the above and other objects, features and advantages of this disclosure more apparent and understandable, preferred embodiments are described below in detail with reference to the accompanying drawings. Attached Figure Description

[0049] To more clearly illustrate the technical solutions of the embodiments of this disclosure, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this disclosure. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0050] Figure 1 A flowchart illustrating an implementation method for zero-configuration start-up of SDWAN provided in this embodiment of the disclosure;

[0051] Figure 2 A flowchart illustrating another method for implementing zero-configuration start-up of SDWAN provided in this embodiment of the disclosure;

[0052] Figure 3 A schematic diagram of a device for implementing SDWAN zero-configuration start provided in an embodiment of this disclosure;

[0053] Figure 4 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this disclosure. Detailed Implementation

[0054] The embodiments of this disclosure will now be described in detail with reference to the accompanying drawings.

[0055] It should be understood that the following specific examples illustrate the implementation of this disclosure, and those skilled in the art can easily understand other advantages and effects of this disclosure from the content disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of this disclosure, and not all of them. This disclosure can also be implemented or applied through other different specific implementation methods, and the details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of this disclosure. It should be noted that, in the absence of conflict, the following embodiments and features in the embodiments can be combined with each other. Based on the embodiments in this disclosure, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this disclosure.

[0056] It should be noted that various aspects of embodiments within the scope of the appended claims are described below. It will be apparent that the aspects described herein can be embodied in a wide variety of forms, and any particular structure and / or function described herein is merely illustrative. Based on this disclosure, those skilled in the art will understand that one aspect described herein can be implemented independently of any other aspect, and two or more of these aspects can be combined in various ways. For example, any number of aspects set forth herein can be used to implement the device and / or practice the method. Additionally, this device and / or method can be implemented using structures and / or functionalities other than one or more of the aspects set forth herein.

[0057] It should also be noted that the illustrations provided in the following embodiments are only schematic representations of the basic concept of this disclosure. The drawings only show the components related to this disclosure and are not drawn according to the number, shape and size of the components in actual implementation. In actual implementation, the form, quantity and proportion of each component can be arbitrarily changed, and the layout of the components may also be more complex.

[0058] Furthermore, specific details are provided in the following description to facilitate a thorough understanding of the examples. However, those skilled in the art will understand that the described aspects can be practiced without these specific details.

[0059] Figure 1 This is a flowchart illustrating a method for implementing zero-configuration SDWAN deployment according to an embodiment of this disclosure. The method includes the following steps:

[0060] S101. Create network policy configuration information for branch site devices on the controller.

[0061] Optionally, the network policy configuration information for the branch site devices is created in the controller, including:

[0062] Headquarters technicians create at least one of the following on the controller: WAN configuration information, LAN configuration information, QoS configuration information, and ACL access control list for branch site devices.

[0063] S102. Associate the network policy configuration information with the SIM card and generate an authentication key.

[0064] S103. Write the controller's first identification information and authentication key into the SIM card.

[0065] For example, the first identification information could be the controller's IP address.

[0066] S104. Insert the SIM card into the wireless terminal access device (CPE). The CPE registers itself online with the controller based on the detected SIM card insertion event.

[0067] S105. The controller sends the network policy configuration information to the CPE device, and the CPE device completes zero-configuration online according to the network policy configuration information.

[0068] This embodiment of the disclosure pre-writes the controller's IP address and authentication key into the SIM card. The authentication key written into the SIM card is used to establish a secure connection and authenticate the wireless terminal access device (CPE). This enables the CPE to read the controller's IP address and authentication key from the SIM card and register with the controller. Users only need to insert the SIM card to complete the automatic zero-configuration online and network security policy configuration, which greatly simplifies the tedious manual configuration process, improves operational efficiency and configuration accuracy, and reduces the risk of misconfiguring devices during SDWAN zero-configuration startup.

[0069] Figure 2 The following is a flowchart illustrating another method for zero-configuration deployment of SDWAN provided in this embodiment: 1. Technicians create network policy configuration information for branch site devices on the controller; 2. The network policy configuration information of the branch site devices is associated with a SIM card; 3. The controller IP address is written to the SIM card; 4. Branch site staff insert the SIM card into the CPE device; 5. The CPE device completes registration and goes online on the controller, and reads the network policy configuration information of the branch site devices on the controller; 6. The controller sends the network policy configuration information to the CPE device, and the CPE device completes zero-configuration deployment according to the network policy configuration information.

[0070] In some embodiments, associating network policy configuration information with a SIM card includes:

[0071] Insert the SIM card into the controller;

[0072] The controller obtains the second identification information of the SIM card.

[0073] Filter the configuration information to be associated from the network policy configuration information;

[0074] Associate the configuration information to be associated with the second identification information of the SIM card.

[0075] In some embodiments, the method includes:

[0076] Read the integrated circuit card identification code (ICCID) of the SIM card according to the instructions of the first SIM module;

[0077] Based on the association between ICCID and the configuration information to be associated, a universally unique identifier (UUID) is randomly generated.

[0078] Create a related table based on the relationship, and store the UUID in the related table.

[0079] Optionally, the CPE device has a built-in controller management program Agent, which reads the SIM card's ICCID according to the SIM first module instruction AT+ZGETICCID, stores the association relationship between the ICCID and the configuration information to be associated, and the controller randomly generates a UUID and stores the UUID in the association table.

[0080] In some embodiments, writing the controller's first identification information and authentication key into the SIM card includes:

[0081] According to the instructions of the second SIM module, the controller's first identification information and authentication key are written to the SIM card by sending an SMS.

[0082] Optionally, the controller's IP address and authentication key can be written to the SIM card via SMS according to the SIM second module instruction AT+CMGW.

[0083] In some embodiments, inserting a SIM card into a wireless terminal access device (CPE), the CPE registers online with the controller based on the detected SIM card insertion event, including:

[0084] The CPE device automatically dials based on the detected SIM card insertion event;

[0085] Read the controller's first identification information and authentication key from the SIM card;

[0086] Based on the first identification information and the authentication key, an authentication request is sent to the controller;

[0087] The controller authenticates the CPE device based on the second identification information of the SIM card and the authentication key in the authentication request;

[0088] When the CPE device is successfully authenticated, a secure connection is established between the CPE device and the controller, and the CPE device is registered and online on the controller.

[0089] In some embodiments, the method includes:

[0090] CPE devices detect SIM card insertion events through a built-in controller's management program;

[0091] When the control program detects a SIM card insertion event, it calls the SIM card to dial.

[0092] A long-term connection is established between the CPE device and the controller based on the SIM first module instruction, ICCID, SIM second module instruction, first identification information or authentication key;

[0093] Based on a long-lived connection, listen for commands issued by the controller.

[0094] This embodiment writes the controller's IP address and authentication key into the SIM card to establish a secure connection between the controller and the CPE, and to authenticate the CPE device. The CPE device then reads the controller's IP address and authentication key from the SIM card and registers with the controller to complete automated configuration.

[0095] Compared to the cumbersome email configuration in related technologies, this embodiment pre-writes the controller's IP address and authentication key into the SIM card, enabling automatic zero-configuration deployment of CPE devices. This significantly simplifies the configuration process and reduces the steps and complexity of manual operations for users. This embodiment eliminates the need for branch site staff to connect their computers to the CPE devices or manually click links for configuration, saving time and effort and improving operational efficiency. Simultaneously, SIM card deployment reduces the risk of incorrect CPE device configuration in SDWAN, improving configuration accuracy.

[0096] Figure 3 This is a schematic diagram of a device for implementing SDWAN zero-configuration deployment according to an embodiment of the present disclosure. The device for implementing SDWAN zero-configuration deployment according to an embodiment of the present disclosure includes:

[0097] Configuration information creation unit 31 is configured to create network policy configuration information for branch site devices in the controller;

[0098] Association unit 32 is configured to associate network policy configuration information with the SIM card and generate an authentication key;

[0099] The writing unit 33 is configured to write the controller's first identification information and authentication key into the SIM card;

[0100] Registration and online unit 34 is configured to insert a SIM card into a wireless terminal access device (CPE), and the CPE device registers and goes online with the controller based on the detected SIM card insertion event.

[0101] The zero-configuration online unit 35 is configured to send network policy configuration information to the CPE device through the controller, and the CPE device completes the zero-configuration online process according to the network policy configuration information.

[0102] An electronic device according to embodiments of the present disclosure includes a memory and a processor. The memory is used to store non-transitory computer-readable instructions. Specifically, the memory may include one or more computer program products, which may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may, for example, include random access memory (RAM) and / or cache memory. The non-volatile memory may, for example, include read-only memory (ROM), a hard disk, flash memory, etc.

[0103] The processor may be a central processing unit (CPU) or other processing unit with data processing and / or instruction execution capabilities, and may control other components in the electronic device to perform desired functions. In one embodiment of this disclosure, the processor is used to execute computer-readable instructions stored in the memory, causing the electronic device to perform all or part of the steps of an SDWAN zero-configuration start implementation method according to the foregoing embodiments of this disclosure.

[0104] Those skilled in the art will understand that, in order to solve the technical problem of how to achieve a good user experience, this embodiment may also include well-known structures such as communication buses and interfaces, and these well-known structures should also be included within the protection scope of this disclosure.

[0105] like Figure 4 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present disclosure. It illustrates a structural schematic diagram suitable for implementing the electronic device in the embodiment of the present disclosure. Figure 4 The electronic device shown is merely an example and should not be construed as limiting the functionality and scope of the embodiments disclosed herein.

[0106] like Figure 4 As shown, an electronic device may include a processor (e.g., a central processing unit, a graphics processing unit, etc.), which can perform various appropriate actions and processes based on a program stored in read-only memory (ROM) or a program loaded from a storage device into random access memory (RAM). The RAM also stores various programs and data required for the operation of the electronic device. The processor, ROM, and RAM are interconnected via a bus. Input / output (I / O) interfaces are also connected to the bus.

[0107] Typically, the following devices can be connected to the I / O interface: input devices, such as sensors or visual information acquisition devices; output devices, such as displays; storage devices, such as magnetic tapes or hard drives; and communication devices. Communication devices allow electronic devices to communicate wirelessly or wiredly with other devices (such as edge computing devices) to exchange data. Although Figure 4Electronic devices with various devices are shown, but it should be understood that it is not required to implement or have all of the devices shown. More or fewer devices may be implemented or have alternatively.

[0108] In particular, according to embodiments of this disclosure, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, embodiments of this disclosure include a computer program product comprising a computer program carried on a non-transitory computer-readable medium, the computer program containing program code for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via a communication device, or installed from a storage device, or installed from ROM. When the computer program is executed by a processor, all or part of the steps of an implementation method for SDWAN zero-configuration start according to embodiments of this disclosure are performed.

[0109] For a detailed description of this embodiment, please refer to the corresponding descriptions in the foregoing embodiments, which will not be repeated here.

[0110] A computer-readable storage medium according to embodiments of the present disclosure stores non-transitory computer-readable instructions. When these non-transitory computer-readable instructions are executed by a processor, all or part of the steps of an implementation method for zero-configuration deployment of SDWAN according to the foregoing embodiments of the present disclosure are performed.

[0111] The aforementioned computer-readable storage media include, but are not limited to: optical storage media (e.g., CD-ROM and DVD), magneto-optical storage media (e.g., MO), magnetic storage media (e.g., magnetic tape or portable hard drive), media with built-in rewritable non-volatile memory (e.g., memory card), and media with built-in ROM (e.g., ROM cartridge).

[0112] For a detailed description of this embodiment, please refer to the corresponding descriptions in the foregoing embodiments, which will not be repeated here.

[0113] The basic principles of this disclosure have been described above with reference to specific embodiments. However, it should be noted that the advantages, benefits, and effects mentioned in this disclosure are merely examples and not limitations, and should not be considered as essential features of each embodiment of this disclosure. Furthermore, the specific details disclosed above are for illustrative and facilitative purposes only, and are not limitations. These details do not limit the scope of this disclosure to the necessity of employing the aforementioned specific details for implementation.

[0114] In this disclosure, relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. The block diagrams of devices, apparatuses, devices, and systems involved in this disclosure are merely illustrative examples and are not intended to require or imply that they must be connected, arranged, or configured in the manner shown in the block diagrams. As those skilled in the art will recognize, these devices, apparatuses, devices, and systems can be connected, arranged, and configured in any manner. Words such as "comprising," "including," "having," etc., are open-ended terms meaning "including but not limited to," and are used interchangeably with them. The terms "or" and "and" as used herein refer to the terms "and / or," and are used interchangeably with them unless the context clearly indicates otherwise. The term "such as" as used herein refers to the phrase "such as but not limited to," and is used interchangeably with it.

[0115] Additionally, as used herein, the “or” used in a list of items beginning with “at least one” indicates a separate list, such that a list of, for example, “at least one of A, B, or C” means A or B or C, or AB or AC or BC, or ABC (i.e., A and B and C). Furthermore, the word “exemplary” does not imply that the described example is preferred or better than other examples.

[0116] It should also be noted that in the systems and methods of this disclosure, the components or steps can be decomposed and / or recombined. These decompositions and / or recombinations should be considered as equivalent solutions to this disclosure.

[0117] Various changes, substitutions, and modifications can be made to the technology described herein without departing from the teachings defined by the appended claims. Furthermore, the scope of the claims of this disclosure is not limited to the specific aspects of the processes, machines, manufactures, events, means, methods, and actions described above. Currently existing or later-developed processes, machines, manufactures, events, means, methods, or actions that perform substantially the same function or achieve substantially the same result as the corresponding aspects described herein can be utilized. Therefore, the appended claims include such processes, machines, manufactures, events, means, methods, or actions within their scope.

[0118] The above description of the disclosed aspects is provided to enable any person skilled in the art to make or use this disclosure. Various modifications to these aspects will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects without departing from the scope of this disclosure. Therefore, this disclosure is not intended to be limited to the aspects shown herein, but rather to be carried out within the widest scope consistent with the principles and novel features disclosed herein.

[0119] The above description has been given for purposes of illustration and description. Furthermore, this description is not intended to limit the embodiments of this disclosure to the forms disclosed herein. Although numerous exemplary aspects and embodiments have been discussed above, those skilled in the art will recognize certain variations, modifications, alterations, additions, and sub-combinations therein.

Claims

1. A method for implementing zero-configuration deployment of SDWAN, characterized in that, include: Create network policy configuration information for branch site devices in the controller; Associate the network policy configuration information with the SIM card to generate an authentication key; Write the controller's first identification information and the authentication key into the SIM card; The SIM card is inserted into the wireless terminal access device (CPE), and the CPE registers itself online with the controller based on the detected SIM card insertion event. The controller sends the network policy configuration information to the CPE, and the CPE completes zero-configuration online deployment based on the network policy configuration information. Inserting the SIM card into a wireless terminal access device (CPE), the CPE registers online with the controller based on the detected SIM card insertion event, including: The CPE automatically dials a number based on the detected SIM card insertion event; Read the first identification information of the controller and the authentication key from the SIM card; Based on the first identification information and the authentication key, an authentication request is sent to the controller; The controller authenticates the CPE based on the second identification information of the SIM card and the authentication key in the authentication request; When the CPE is successfully authenticated, a secure connection is established between the CPE and the controller, and the CPE is registered online with the controller.

2. The method for implementing SDWAN zero-configuration deployment according to claim 1, characterized in that, Associating the network policy configuration information with the SIM card includes: Insert the SIM card into the controller; The controller obtains the second identification information of the SIM card; Filter the configuration information to be associated from the network policy configuration information; The configuration information to be associated is associated with the second identification information of the SIM card.

3. The method for implementing SDWAN zero-configuration deployment according to claim 2, characterized in that, The method includes: The integrated circuit card identification code (ICCID) of the SIM card is read according to the instructions of the first SIM module. Based on the association relationship between the ICCID and the configuration information to be associated, a universally unique identifier (UUID) is randomly generated. A relationship table is created based on the relationship, and the UUID is stored in the relationship table.

4. The method for implementing SDWAN zero-configuration deployment according to claim 3, characterized in that, Writing the controller's first identification information and the authentication key into the SIM card includes: According to the instructions of the second SIM module, the first identification information of the controller and the authentication key are written into the SIM card by sending an SMS.

5. The method for implementing SDWAN zero-configuration deployment according to claim 4, characterized in that, The method includes: The CPE detects the SIM card insertion event through the built-in control program of the controller; When the control program detects the insertion of the SIM card, it invokes the SIM card to make a dialing call; A long-term connection is established between the CPE and the controller based on the SIM first module instruction, the ICCID, the SIM second module instruction, the first identification information, or the authentication key; Based on the long connection, listen for instructions issued by the controller.

6. The method for implementing SDWAN zero-configuration deployment according to claim 1, characterized in that, Create network policy configuration information for branch site devices on the controller, including: The controller creates at least one of the following configuration information for the branch site device: WAN configuration information, LAN configuration information, QoS configuration information, and ACL access control list.

7. An apparatus for implementing zero-configuration SDWAN deployment, characterized in that, include: The configuration information creation unit is configured to create network policy configuration information for branch site devices in the controller. The association unit is configured to associate the network policy configuration information with the SIM card and generate an authentication key; The writing unit is configured to write the controller's first identification information and the authentication key into the SIM card; The registration and online unit is configured to insert the SIM card into the wireless terminal access device (CPE), and the CPE registers and goes online with the controller based on the detected insertion event of the SIM card. The zero-configuration deployment unit is configured to send the network policy configuration information to the CPE through the controller, and the CPE completes the zero-configuration deployment according to the network policy configuration information; Inserting the SIM card into a wireless terminal access device (CPE), the CPE registers online with the controller based on the detected SIM card insertion event, including: The CPE automatically dials a number based on the detected SIM card insertion event; Read the first identification information of the controller and the authentication key from the SIM card; Based on the first identification information and the authentication key, an authentication request is sent to the controller; The controller authenticates the CPE based on the second identification information of the SIM card and the authentication key in the authentication request; When the CPE is successfully authenticated, a secure connection is established between the CPE and the controller, and the CPE is registered online with the controller.

8. An electronic device, characterized in that, The electronic device includes: At least one processor; and, A memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor to enable the at least one processor to perform the SDWAN zero-configuration start implementation method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions for causing a computer to perform the implementation method of SDWAN zero-configuration start as described in any one of claims 1 to 6.

Images