Cisco Viptela SD-WAN Training

Explore lab topology for Cisco Viptela SD-WAN training, featuring vsmart, a certificate server, Windows Server 2012, a management pc, vh devices, two c devices, VPCs, a router, and a switch.

Explore how software defined networking centralizes control from a single location, removes device management and data-plane responsibilities, and enables zero-touch deployment of sd-wan for secure, low-cost branch connectivity.

Explore software defined networking with centralized control across LAN, data center, and WAN, covering SD-WAN, SDA, cloud deployment, IPsec tunnels, and zero-touch provisioning.

Contrast MPLS and SD-WAN to show SD-WAN uses any path (MPLS, internet, 5G) and enables automatic path changes, without being a full replacement of MPLS yet.

Discover how vmanage centralizes configuration and monitoring for up to 2000 VEdge devices, while vSmart drives control plane policies and vBond orchestrates onboarding with TLS tunnels.

Explore underlay as the hardware network that provides IP reachability, and overlay as the virtual sd-wan tunnels that securely connect branches using IPsec and TLS.

Configure system IPs and site IDs as unique identifiers for each SD-WAN device. Use VPN zero for transport and IPsec tunnels, secured by TLS within the overlay and underlay fabric.

Explain the three network planes—management, control, and data—and how sd-wan decouples them, assigning management to vmanage, control to vsmart, and data to vedge.

Download and install eve-ng community or professional editions, along with the Windows client and router-switch images, to build a complete sd-wan lab.

Install and register VMware Workstation Pro 16, configure two VMnet adapters, enable automatic IP assignment, disable IPv6, and troubleshoot 169 IP issues to ensure lab readiness.

Install eve-ng community edition on VMware, import the file, configure memory and adapters, enable virtualization in bios, and resolve common virtualization errors for labs.

Install the EVE-NG client pack with Wireshark and required components, while avoiding npcap issues and using the suggested pcap alternative for smooth lab operation.

Master EVE-NG qemu folder and image naming for Cisco Viptela SD-WAN by using lowercase folder names before the dash and exact file naming to ensure proper uploads.

Upload Cisco iOS router images to eve-ng via sftp, unzip them, apply fixed permissions, and place routers in the opt unit lib edison and dynamix directory, then start and test.

Upload Cisco IOU switches from the shared lab location, ensure the license file named F and G matches the host name, and set them as layer two or three.

Explore EVE-NG clouds — net, host-only, and bridge — and how they map to external interfaces, configure IPs, test connectivity, and access devices via cloud mappings.

Upload a Windows Server image to act as a certificate server, follow strict folder and file naming conventions, set appropriate permissions, and boot the lab server.

Upload readymade sd-wan images for vBond, vEdge, vManage, and vSmart by downloading, unzipping, copying to lab location, and applying fixed permissions; login with admin/admin to use them in your lab.

Learn to upload sd-wan images for VManage, VSmart, VEdge, and VBond by downloading from Cisco, organizing by component and version, renaming files, and applying permissions for lab validation.

Learn how to upload a cEdge sd-wan image for a viptela topology by preparing a correctly named folder, renaming the image file, and applying the fixed permission command.

Create a complete Cisco Viptela sd-wan lab topology from scratch, configuring vbond, vsmart, vedge, vmanage, c-edge, and a management cloud with an IP schema.

Export and import topologies in EVE-NG to share Cisco Viptela SD-WAN labs with others. Learn to use zip format, upload, and reset labs by wiping nodes before running them.

Configure the core switch: set hostname to core, configure vlan 1 ip 192.168.10.254, convert eth1/0 to layer-3 with 100.0.10.2/24, and add a default route to 100.0.10.1; enable management on 192.168.114.x.

Configure the internet router with five interfaces, assign ip addresses and descriptions, disable cdp, set a default route to the core switch, verify reachability with ping, and save the configuration.

Configure Active Directory by assigning a static IP and gateway, installing Active Directory Domain Services, and promoting the server to a domain controller for test.local with DNS.

Configure and verify DNS by creating forward and reverse lookup zones in Active Directory. Add A records for vmanage, vbond, and vsmart, and test hostname and IP resolution.

Configure and verify a certificate authority on Windows Server 2012 by installing Active Directory certificate services and certificate authority web enrollment, then test via browser.

Configure an NTP server via group policy to synchronize time across DNS and Active Directory, enable the Windows time service, allow port 123 UDP, and verify with a test tool.

This lecture guides the first-time bootstrap of Cisco vManage in a Viptela sd-wan environment, detailing system IP setup, site ID, organization name, DPI server, VPN zero configuration, and browser access.

Configure the vBond bootstrap by setting the system IP, site ID, and organization name, and bind to VPN zero on interface g00, then verify with ping and commit changes.

Learn how to perform vManage basic configuration in Cisco Viptela SD-WAN, including setting the organization name, vBond IP, root certificate, and pushing certificates to vSmart and vBond via API.

Generate a CSR from the vmanage interface, submit it to the certificate authority, and install the issued certificate to validate the vmanage controller and root CA trust.

Add the vBond to vManage, generate and install the CSR certificate, install root certs, and enable the tunnel interface to bring the vBond online.

Configure vSmart in vManage by generating and installing a CSR and certificate from the certificate authority, enable tunnel services, and verify the device is online.

Upload the WAN edge device list in vManage, providing serial numbers for virtual and physical devices, and use license files with smart account sync to authorize and push configurations.

Perform the vEdge1 bootstrap: set system IP, site ID, organization name, hostname, and VPN zero transport with a default route to the internet router.

Deploys the vEdge 1-1 by uploading the root certificate and registering with vmanage using bootstrap, chase number, and token. Brings the device online by configuring the VPN zero interface.

Configure vEdge2 bootstrap with basic settings: system IP, site ID, bond IP, organization name, hostname, NTP, and VPN 0 interface, then apply and verify before certificate upload.

Upload the root certificate to vh using sftp, install it via vShell, then register the edge in Vmanage by generating bootstrap configuration, applying the token, and enabling ipsec services.

Configure the cEdge3-1 bootstrap by setting host name, system IP, site ID, organization name, vBond IP, and admin credentials, then create the external and tunnel interfaces, enable IPsec, and commit.

Upload and install the root certificate to the edge, register CSR devices with Vmanage, generate bootstrap configuration, and verify certificate deployment across cEdge devices.

Walk through the cedge4-1 bootstrap configuration for Cisco Viptela sd-wan, covering system IP, site IDs, organization name, bond IP, and initial VPN setup.

Upload the device certificate and register the cEdge device with vmanage by generating the bootstrap configuration and cloud init, then install the root certificate and activate with uid and otp.

Learn how to use device templates and feature templates in Cisco SD-WAN to push consistent configurations to many Vedge and C edge devices, using global, device-specific, and default values.

Learn to create vEdge feature templates and a device template in Cisco Viptela SD-WAN, configuring system, VPN zero and VPN one, and interface templates for two devices.

Create a Vmanage device template by combining VH feature templates for two Vedge devices and assign site-specific VPNs and interfaces, then push the template centrally to enable IPsec connectivity.

Learn to create five cEdge feature templates and one device template for CSR devices in Cisco Viptela SD-WAN, configuring system, VPN zero, and interface details.

Create a c edge device template from feature templates, configure system and vpn interfaces, and attach devices in vmanage to push and verify connectivity across four sites.

Perform a comprehensive walkthrough of the vManage dashboard, exploring Cloud Express, alarms, tasks, certificates, devices, and control connections across vSmart and Vedge to assess site health and transport performance.

Troubleshoot Cisco Viptela SD-WAN by verifying certificates, system IP, site ID, and organization name; verify VPN zero routes and TLS/IPsec connections via CLI.