
Section 1:Cisco SDWAN Viptela CLI to Feature Template Configuration with VRRP & TLOC-EXT
Lecture 1:Convert CLI to Device Feature Template Part01
Lecture 2:Convert CLI to Device Feature Template Part02
Lecture 3:Convert CLI to Device Feature Template Part03
Lecture 4:Attach Device Feature template to Device 04
Lecture 5:Viptela VRRP Theory
Lecture 6:Viptela VRRP Configuration
Lecture 7:Viptela VRRP Verification
Lecture 8: Viptela TLOC Extension Theory
Lecture 9: Viptela TLOC Extension Lab
Section 2:5 Videos taken from Taken from Part1 "ABC of Cisco SDWAN Viptela Part 1"
Lecture 10: vSmart Policy Overview part 01
Lecture 11: vSmart Policy Overview part 02 vSmart Policy Architecture Components
Lecture 12: Building blocks to vSmart policy 03
Lecture 13: vSmart Policy Execution & Example 04
Lecture 14: vSmart Policy Processing and Application with Lab 05
Section 3:Viptela Data Policy .. Continued from "abc of Cisco SDWAN Viptela" course
Lecture 15:Data Policy 01 Service Chaining
Lecture 16:Data Policy 02 Nat Exit
Lecture 17:Data Policy 03 Vpn Membership Policy
Lecture 18:Viptela App Aware Routing Basic Introduction
Lecture 19:viptela App Aware Routing BFD to track SLA Class
Lecture 20:Viptela app aware routing policy configuration 01
Lecture 21:Viptela app aware routing policy configuration 02
Lecture 22:Viptela app aware routing policy implementation 01
Lecture 23:Viptela app aware routing policy implementation 02
Lecture 24:Viptela app aware routing policy Verification & basic Troubleshoot
Section 4:High Availability & Scalability
Lecture 25:Cisco Viptela Robust Network Design
Lecture 26:Cisco Viptela vManage NMS Redundancy
Lecture 27:Cisco Viptela vSmart & vEdge Controller Redundancy
Lecture 28:Cisco Viptela Recovering from a Failure in the Control & Data Plane
Lecture 29:Cisco Viptela Using Affinity to Scale Network
Section 5:Cloud-express , TCP Optimization & vAnalytics
Lecture 30:Cloud-express Part 01
Lecture 31:Cloud-express Part 02
Lecture 32:Cloud Integration TCP Optimization
Lecture 33:Viptela vAnalytics Introduction
Lecture 34:Viptela vAnalytics Features part 01
Lecture 35:Viptela vAnalytics Features part 02
Lecture 36:Zscaler & Security Features Part 01
Lecture 37:Zscaler & Security Features Part 02
Section 6:SDWAN Troubleshooting
Lecture 38:Control Plan Debug vdaemon
Lecture 39:Data Plan Debug transport events
Lecture 40:Data Plan Debug OMP
Lecture 41:Tranport VPN & OMP Failure
Lecture 42:VPN Limit number of VPNs with Restrict
Lecture 43:IPSEC VPN Connection
Lecture 44: Extranet Tshoot
Lecture 45: BringUp Control Plan , Set vmanage connection preference & Attach CLI Template
Lecture 46: Install & Route Filter
Lecture 47: BGP Configuration and Route Preference 01
Lecture 48: BGP Configuration and Route Preference 02
Lecture 49: Tloc Preference & Route Filter
Lecture 50: vManage Dashboard Troubleshooting options
Lecture 51: vManage Tools & CLI Tools Options
Lecture 52: ZTP tshoot Part 01
Lecture 53: ZTP tshoot Part 02
Lecture 54: VRRP Issues
convert cli to device feature template part02 guides building internet facing templates, enabling ipsec, color restrictions, and configuring branch vpn templates ten, twenty, and forty with local policy and acl.
Convert cli to device feature template by building a vpn 512 with ipv4 route to the gateway and eth0, then create and attach a localized policy for branch one.
Demonstrates attaching a device to a feature template in Cisco sd-wan, exporting and uploading csv or excel, configuring variables, validating input, and pushing the configuration.
Explore how transport locator extension simulates multiple transports, using back-to-back cables to connect MPLS and Internet and extend VPN zero for resilient control plane reach.
Explore the viptela policy framework, distinguishing control and data policies and centralized versus localized deployments, and identify traffic lists, policy definitions, and site lists linking Vmanage, vSmart, and edge.
Implement local internet exit using a data policy to apply nat rules per vedges across the sd-wan fabric, matching subnets and applying nat inside vpn zero for vpn ten branches.
Define app routing policies to optimize cloud-based sd-wan traffic, leveraging centralized or localized data policies, monitor end-to-end performance via loss and latency, and adjust tunnels for sla-driven failover.
Explore building a centralized Viptela app routing policy at the vsmart level, defining lists, app route policy, match criteria, and actions, with a default accept and site lists.
Create app route policies by building vpn lists, app lists, and site lists, then define classes and sequences to log matches and steer primary and backup paths using bft colors.
This lecture builds and applies Viptela app-aware routing policies using app lists for SIP, HTTPS, and voice/video, defining sequence-based rules and backup internet versus MPLS, deployed to branches.
Verify Viptela app aware routing policies using show app, show flow, and show app route while inspecting dpi to compare MPLS and Internet paths, control connections, and policy-driven traffic steering.
Enable Cloud Express on the Vmanage dashboard, add applications under VPN ten, and save changes to push updates to branch devices for optimized internet exit via Zscaler or Iboss.
Enable tcp optimization in Cisco SD-WAN Viptela to boost tcp performance on long latency links such as VSAT, for SaaS apps, with system-wide, vpn-wide, or per-flow options.
Enable cloud-based Viptela analytics in Vmanage and access app, service, and IP based reports. Export to pdf or excel, customize dashboards, and receive email notifications.
Learn how to integrate the Viptela SD-WAN with Zscaler to route internet traffic through Zscaler, configuring VPN zero interfaces and edge-to-cloud tunnels.
Diagnose transport VPN and OMP failures in a Viptela fabric using Vmanage alerts, templates, and CLI debugs to restore OMP and IPsec tunnels and BFD status.
Learn to restrict VPN connections in Cisco SD-WAN by applying color-based rules to allow only gold-to-gold and MPLS-to-MPLS tunnels, and verify with show ipsec inbound connection.
Establish and debug BGP between edge and router three, advertise loopbacks, redistribute BGP into OMP, and implement a vSmart policy to prefer data center routes DC1 and DC2 over branches.
Analyze BGP route preferences and OMP routes, compare VPN paths from vsmart via gold IPsec and MPLS IPsec, and adjust hub-and-spoke topology by setting higher preferences.
Shows tloc preference by steering VPN1 traffic to MPLS TLOC over Gold via IPsec encapsulation, then blocks the loopback route with a control policy and verifies with traceroute.
Explore vmanage tools options and admin tech workflows for troubleshooting, including generating and exporting admin tech files and using ssh, scp, and linux tools like ip route and netstat.
Troubleshoot ZTP by verifying DNS resolution to z.viptela.com, DHCP reachability, and vbond/vmanage authentication, ensuring a device with serial and chassis numbers is registered with the template in vmanage.
What is SD-WAN ? Software-Defined WAN (SD-WAN) is an overlay architecture that overcomes the biggest drawbacks of traditional WAN. SD-WAN builds a secure, unified connectivity over any transport (MPLS, Broadband, LTE, VSAT etc.) and provides simplified operations with centralized management, policy control and application visibility across the enterprise.
Significance of Viptela
The Most Deployed SD-WAN in Global 1000 Companies . With SD-WAN built on the Viptela Fabric, enterprises can provide secure connectivity everywhere, deploy new services and applications faster, and drastically simplify operational complexity in the WAN.
In this course you will find explanation of Viptela controllers and nice and easy way to learn core components of SDWAN.
SD-WAN is a software-defined approach to managing the WAN.
Key advantages include:
Reducing costs with transport independence across MPLS, 4G/5G LTE, and other connection types.
Improving application performance and increasing agility.
Optimizing user experience and efficiency for software-as-a-service (SaaS) and public-cloud applications.
Simplifying operations with automation and cloud-based management.
Why now for SD-WAN?
The traditional WAN
The traditional WAN (wide-area network) function was to connect users at the branch or campus to applications hosted on servers in the data center. Typically, dedicated MPLS circuits were used to help ensure security and reliable connectivity. This doesn't work in a cloud-centric world.
Today's IT challenges
Times have changed. As businesses adopt the use of SaaS and infrastructure-as-a-service (IaaS) applications in multiple clouds, IT is realizing that the user application experience is poor. That is because WANs designed for a different era are not ready for the unprecedented explosion of WAN traffic that cloud adoption brings. That traffic causes management complexity, application-performance unpredictability, and data vulnerability.
Further, opening the enterprise to the Internet and the cloud exposes major threat and compliance issues. It is extremely challenging to protect the critical assets of an enterprise when applications are accessed by a diverse workforce, including employees, partners, contractors, vendors, and guests. Enabling broadband on the WAN makes the security requirements more acute, creating challenges for IT in balancing user experience, security, and complexity.
The new WAN
New business models drive the need for a new network model.
SD-WAN addresses the current IT challenges. This new approach to network connectivity can lower operational costs and improve resource usage for multisite deployments. Network administrators can use bandwidth more efficiently and can help ensure high levels of performance for critical applications without sacrificing security or data privacy.
What are the benefits of SD-WAN?
The traditional WAN architecture was limited to enterprise, branch, and data center. Once an organization adopts cloud-based applications in the form of SaaS and IaaS, its WAN architecture experiences an explosion of traffic accessing applications distributed across the globe.
These changes have multiple implications for IT. Employee productivity may be compromised by SaaS-application performance problems. WAN expenses can rise with inefficient use of dedicated and backup circuits. IT fights a daily, complex battle of connecting multiple types of users with multiple types of devices to multiple cloud environments.
With SD-WAN, IT can deliver routing, threat protection, efficient offloading of expensive circuits, and simplification of WAN network management. Business benefits can include the following:
Better application experience
High availability, with predictable service, for all critical enterprise applications
Multiple hybrid active-active links for all network scenarios
Dynamically routed application traffic with application-aware routing, for efficient delivery and improved user experience
Improved OpEx, replacing expensive Multiprotocol Label Switching (MPLS) services with more economical and flexible broadband (including secure VPN connections)
More security
Application-aware policies with end-to-end segmentation and real-time access control
Integrated threat protection enforced at the right place
Secure traffic across broadband Internet and into the cloud
Distribute security to the branch and remote endpoints with NGFW, DNS security, and NGAV
Optimized cloud connectivity
Seamless extension of the WAN to multiple public clouds
Real-time optimized performance for Microsoft Office 365, Salesforce, and other major SaaS applications
Optimized workflows for cloud platforms such as Amazon Web Services (AWS) and Microsoft Azure
Simplified management
A single, centralized, cloud-delivered management dashboard for configuration and management of WAN, cloud, and security
Template-based, zero-touch provisioning for all locations: branch, campus, and cloud
Detailed reporting of application and WAN performance for business analytics and bandwidth forcasting