Cisco SD-WAN Operation and Deployment (ENSDW)

Discover how Cisco SD-WAN builds a secure extensible network with an overlay that decouples data and control planes, enabling zero touch configuration and cloud integration.

Explore the Cisco SD-WAN architecture, detailing data plane and IPsec tunnels, plus the V bond, V manage, and V smart controllers for authentication, orchestration, and policy distribution.

Discover how to manage an sd-wan fabric with v manage, including device monitoring, controller status, and cloud express. Use built-in tools for troubleshooting and maintenance and software upgrades.

Ensure secure control plane operation in Cisco SD-WAN by mutual certificate exchange among V bond, V smart, and V manage, using TPM keys, serial numbers, and zero-trust provisioning.

Enable secure control plane deployment using zero-touch provisioning with GDP, and orchestrate onboarding via vBond, vManage, and vSmart to join the sd-wan overlay.

Learn how vEdge devices securely exchange IPsec keys with the vSmart controller to automatically establish full mesh IPsec data planes. Highlight BFD-based forwarding detection and application visibility.

Explore cloud deployments and redundancy in Cisco SD-WAN, including direct internet access, backhaul options, and per application quality of experience probing for SaaS such as Office 365 and Salesforce.

Understand cloud deployments and redundancy in Cisco SD-WAN, including bi-directional redistribution between BGP and MP, and multi-path failover with virtual IP and VRRP.

Explore the Cisco SD-WAN templates overview, including device and feature templates, parameter scopes, and site-specific values, enabling template-driven provisioning via vManage with a single source of truth.

Create feature templates in vManage to configure features like system, VPN, interface, and GPS, using device-specific values and global defaults for Cisco SD-WAN deployment.

Create and apply feature templates in Cisco sd-wan, starting with logging templates and device model selection. Explore security, BFD, NDP, VPN, banner, BGP, DCP server, and polling templates for management.

Understand device templates in Cisco SD-WAN by assembling feature templates into a model-specific template, covering basic information, transport and management VPN, service VPN, and BGP Tripoli parameters.

Attach devices to a device template in Cisco SD-WAN, choose the template, move devices left to right, and apply single or bulk parameters via a CSP file; monitor task status.

Explore overlay routing and how the overlay management protocol exchanges control and routing data between vEdge devices and vSmart controllers to enable policy and secure data plane across any transport.

Explore omp route advertisements in Cisco sd-wan: smart controllers publish local routes, transport locations, and network service roads to the controller, while data traffic flows directly between devices.

Explain how OMP route redistribution works between the overlay and service side, including when to redistribute BGP and static routes, and how origin and admin distance influence policy decisions.

Explore how network segmentation is achieved in the Cisco sd-wan fabric by using per-vpn policies and vsmart controller configuration to control prefix advertisement and prevent leakage between sites.

Configure and verify OMP using feature templates in the Cisco SD-WAN console, adjust wimpy timers, enable BGP redistribution, and monitor real-time MP peering and services via the network tab.

Configure network segmentation on bp devices via cli or manager by configuring vpn interfaces, assigning IP addresses, enabling them, and saving the configuration to separate management and transport traffic.

Configure and verify OSPF in a Cisco SD-WAN environment by enabling OSPF on service and transport sides, redistributing routes into OSPF, and checking neighbors and the OSPF database.

Configure and verify BGP on service or transport sides with VManage templates, set neighbors, address family, redistribution, and optional route policies, then validate via real time monitoring and CLI verification.

Explore the Cisco SD-WAN policy framework, distinguishing centralized and localized control and data policies, and learn how the VSmart controller and the data plane enforce traffic rules across the overlay.

Explore the building blocks of centralized policies, including the group of interest, policy definition, and policy application, and how VManage enforces them across smart controllers and edge devices.

Explore how vSmart policy operation and construction manage control and data policies, site lists, and VPN membership to influence inbound and outbound routing in Cisco SD-WAN.

Explore forwarding and quality of service in Cisco SD-WAN, using centralized and local data policies, ACLs, and forwarding classes to classify, map, and schedule traffic.

Configure and monitor QoS forwarding in Cisco SD-WAN by mapping forwarding classes to output queues, setting per-class bandwidth and drop policies, and applying a unified US map to egress.

Configure and monitor QoS forwarding by marking and rewriting the DSCP field on ingress and egress, classify traffic with deep packet inspection, and apply policy-based controls.

Identify control connection failures by diagnosing connectivity, DNS resolution, port openness, and certificate validation, then verify serial numbers and organization name consistency across all controllers and devices.

Examine health status checks on Cisco vManage for vh devices, covering system health, reboot counts, modules, power, temperature, interface and transport quality, and application traffic insights.

Learn how to perform health status checks on vEdge VHS devices in Cisco sd-wan, inspect application flows and events, and use logs and debugging tools to troubleshoot connectivity.