Cisco SD-WAN Toni Pasanen

✍ Scribed by Toni Pasanen

• Year: 2021
• Tongue: English
• Leaves: 305
• Category: Library

✦ Table of Contents

Chapter 1: Setting Up On-Prem Controllers
Introduction
Configuring IOS-XE Certification Server
Enabling HTTP Server and NTP
Certificate Server Configuration
vManage Configuration
System Information
VPN Configuration
Certification enrollment
vBond Initial Configuration
System Information
VPN Configuration
Certification enrollment
vSmart Initial Configuration
System Information
VPN Configuration
Certification enrollment
Control Connection Verification
Chapter 2: Manual vEdge Provision
Introduction
vEdge Configuration
System Information
Underlay Network: VPN 0
Certification enrollment
Onboarding Process
Control Connection Verification
Chapter 3: Overlay Management Protocol
Introduction
Service VPN Configuration
TLOC Routes
Tunnel Verification
OMP Routes
IP Reachability Verification
Data Plane
Summary
Chapter 4: Consideration When Using MPLS Transport
Introduction
Building a Label Switch Path
Segment Routing Global Block (SRGB)
IGP Prefix Segment (Prefix-SID)
MP-BGP: Advertising Customer Routes
Summary
MPLS device configurations
Chapter 5: Policies – Topology: Hub and Spoke
Introduction
vSmart - from CLI mode to vManaged mode
Create CLI Template
Attach CLI Template to vSmart
Policy Configuration
Step-1: Create Site-List
Step-2: Create Control Policy
Step-3: Apply Control Policy
Step-4: Activate Centralized Policy
Policy Verification
Spoke-to-Spoke traffic
Summary
Chapter 6: Feature and CLI Templates
Introduction
Feature Templates
System and NTP Templates
VPN Template
VPN Interface
Device Templates
System and NTP
VPN Template
Attach Device Template to vEdge
Verification
Detach Device Template from vEdge
CLI Templates with Variables
Attach Template to vEdge
Verification
Summary
Chapter 7: TLOC Extension
Introduction
Configuring TLOCs by using CLI
Template Based TLOC Extension
Benefits of TLOC Extension
Chapter 8: BGP Routing in LAN
Introduction
BGP Configuration Using CLI
Feature Template Based BGP Configuration
Verification
Route Optimization
Centralize Policy for OMP Route Filtering
Chapter 9: Traffic Engineering
Introduction
Centralized Policy – Precedence
TLOC List Configuration
TLOC Control Policy Configuration
Applying Control Policy
Verification Control Policy Configuration
Feature Template – Precedence & Prefix
Route Control Policy Configuration
Feature Template – Precedence
Summary
Chapter 10: Application-Aware Routing
Introduction
Tunnel Health Monitoring
BFD Settings
Tunnel Switch-Over Process
Path Quality Monitoring
SLA-Class & Traffic Policy
Centralized Policy
Chapter 11: Direct Cloud Access
Introduction
Data Policy
Building Blocks
Configuration Data Prefix List
Configuration Data Policy
Applying the Data Policy to Centralized
Data Policy Verification
Zone-Based Firewall
Building Blocks
Configuration Zone Lists
Create Data Policy
Apply FW Policy to Device Template
Appendix A: Device Configurations
Underlay Network Devices
Internet Router
PE1-West
PE2-East
P3-South
Control Components
CA-Server
vBond
vSmart
vManage
Edge and LAN Devices
vEdge-1
vEdge-2
vEdge-3
LAN-Ro04