Cisco Viptela SD-WAN – Design

This lecture contrasts legacy network cost and complexity with a steven fabric sd-wan overlay that decouples data plane from control plane for centralized, cloud-ready provisioning.

Explore the sd-wan components, including data plane tunnels, centralized control plane with smart controllers, and management analytics, and learn how vBond, vManage, vSmart, and vAnalytics handle authentication and policy exchange.

Learn to manage the Cisco Viptela sd-wan fabric using vManage, including monitoring devices, configuring certificates and cloud express, troubleshooting with task and alarm views, and performing maintenance and upgrades.

Design transport side connectivity for Cisco Viptela sd-wan by connecting Internet and MPLS transports to two vEdge routers, creating redundant tunnels and supporting block extension for continued traffic.

Learn controllers design principles for Cisco Viptela sd-wan, including cloud, MSP, and on-prem deployments. Explore vBond, vManage, and vSmart roles, multitenant vs dedicated setups, and primary/secondary groups for redundancy.

Explore branch design principles that emphasize simplicity, minimize unnecessary connections, and integrate routing with the code switch, while considering WISEN security services and Cisco feature support.

Design a branch with a single vEdge, requiring at least two circuits (MPLS or internet). Traffic is encrypted over tunnels to the overlay, with routing advertised to remote sites.

Design a branch with dual edge using the Telarc extension to extend circuits and enable redundancy across internet and transport.

Design branch resilience with dual internet switch and dual isp connections, extending circuits and providing redundancy, using vr routing protocol for gateway redundancy and route redistribution to remote sites.

Assess data center design principles for brownfield deployments, preserve existing traffic flow, and leverage BGP for granular routing with dynamic routing where possible, integrating with the customer edge when necessary.

Design data center topologies by connecting branches and placing vEdge routers behind the perimeter firewall, supporting BGP or IGP routing.

Explore a data center design scenario for Cisco Viptela SD-WAN, detailing edge and LAN interfaces, trunking, and routing with IGP and BGP redistribution to cloud and sites.

Design data center connectivity by configuring a trunk on the data center switch to connect to the VA router, using VLANs for transport and LAN, with IGP and BGP redistribution.

Explore data center design scenario four, showing traffic routed through the internal firewall before reaching the data center and the use of BGP between the core switch and firewall.

Explore the final data center design scenario, including sea replacement and brown field deployment considerations, with direct internet to virtual transport behind a perimeter firewall.

Understand overlay and underlay routing principles for sd-wan design, emphasizing simple designs, avoiding routing loops, and routing traffic between migrated and non-migrated sites via regional hubs and ip tunnels.

Map interfaces to VPN and VRF, configure transport, management, and service VPN types, enabling end-to-end segmentation across branches, data centers, and cloud, with firewall-aware options for PCI traffic.

Explore active-active data center design by balancing resources across two data centers and using a control policy to advertise highest-preference routes to branches.

Design an active-dr data center with a primary site and disaster recovery, connected to branches via two transports, using a centralized policy to route traffic to the primary DC.

Design vpn topologies by balancing full mesh and spoke policies, and manage route advertisement from the data center to branches. Adjust default routes to direct internet access through the vpn.

Keep designs simple for easy understanding and deployment, and ensure business transparency. Favor BGP routing across overlay and underlay, enable branch-to-data center segmentation, and apply centralized and localized policies.