Installing, Configuring, Monitoring and Troubleshooting Cisco (Viptela) SDWAN

Module 0: Introductions

• Module Topics
  • General Administration
  • WebEX Basics
  • Introductions
  • Questions Asked by Companies about SD-WAN
  • What is SD-WAN?
  • SD-WAN Desired Benefits
  • How does Cisco define SD-WAN?
• Module Summary

Module 1: Cisco SD-WAN (Viptela) Platform Overview

• Module Topics
• Lesson 1: Legacy WAN Architecture
  • Common WAN Topologies – Design and Deployment Considerations
  • WAN needs to Support Cloud Apps
  • Cisco’s SD-WAN Functionality Comparison
• Lesson 2: Cisco SD-WAN / Digital Network Architecture Integration
  • Secure Cloud Scale SD-WAN Architecture
  • SD-WAN Security
  • SD-WAN Connectivity
  • SD-WAN Application Services
  • SD-WAN Operations
• Lesson 3: Software Defined Centralized Control
  • SD-WAN – Control Plane vs Data Plane
• Lesson 4: Cisco SD-WAN Solution Overview
• Lesson 5: New SD-WAN Terminology
• Lesson 6: Cisco DNA SD-WAN Licensing
  • Cisco SD-WAN Solution Roles and Responsibilities
  • Cisco SD-WAN Cloud-Delivered Architecture
  • Widely Deployed SD-WAN Capabilities
  • Choose Licensing Type and Level
  • Cisco DNA SD-WAN Licensing
  • Bandwidth Metering
  • Cisco DNA Bandwidth Upgrades
  • Cisco Smart Licensing
  • Cisco Smart Licensing Pooling
  • Managing Smart Licenses
  • What a Smart Account is and what it isn’t
  • Smart Account Structure
  • SDWAN Smart Licensing phase 2 (offline reporting and compliance notification) for SDWAN
• Module Summary

Module 2: Deploying Cisco SD-WAN Controllers

• Module Topics
• Lesson 1: Cisco SD-WAN Architecture
• Lesson 2: Cisco SD-WAN Controller Deployment Models
  • Controller Deployment Models
  • From Order to Zero-Touch Deployment
  • Controllers Deployment Methodology
  • Cisco SD-WAN Architecture – vManage
  • Cisco SD-WAN Architecture – vSmart
  • Cisco SD-WAN Architecture – vBond
  • Controller Communication Principles
  • Controller Deployment in AWS
  • Cloud Hosted Deployment – Public IP Access to VPN 512
  • Management Traffic for Cloud Deployed Controllers
  • Controllers Public Cloud Deployment
  • Cloud Hosted Deployment – Recommended
  • WAN Edge Control Plane Transport
  • Cloud-Hosted Deployment – Summary
  • On-Prem Deployment Considerations
  • On-Prem Controllers Deployment
  • On-Prem Deployment – vBond / NAT Traversal
  • On-Prem Controller Access
  • On-Prem Deployment
  • Controller Proxy Access
  • Controller Deployment – vManage
• Lesson 3: Cisco SD-WAN Self Service Portal
  • Cisco SD-WAN Self-Service Portal url
  • Configure Cisco SD-WAN Self-Service Portal Components
  • Configure an IdP for the Cisco SD-WAN Self-Service Portal
  • Configure Cisco SD-WAN Self-Service Portal Roles for IdP Users
  • Create a Cisco SD-WAN Cloud-Hosted Overlay Network (1)
• Lesson 4: On-Prem Controller Deployment
  • Controller Installation Overview
  • Controller Virtual Machines Files
• Lesson 5: Create vBond VM Instance on ESXi or KVM
  • Hypervisor Compatibility for vManage, vSmart, and vBond
  • Compatibility Matrix for Cisco SD-WAN Release 20.6.x
  • Compatibility Matrix for Cisco SD-WAN Release 20.4.x
  • SD-WAN Server Sizing
  • vManage Downloads on Cisco.com
  • vManage NMS Server Recommendations 20.6.x
  • Deploy vManage VM Instance on ESXi
  • Deploy vManage VM Instance (1)
  • Change vManage VM Settings – Add Additional Hard Disk
  • Start the vManage Instance and Connect To the vManage Console
  • vManage Console Login
  • vManage – Persona
  • vManage – Add Database Storage
  • Network Interfaces
• Lesson 6: Initial vManage Setup
  • Initial Settings Set at the CLI (1)
  • Configuring vManage Interface Settings
  • Configure General System Parameters – NTP
  • Create a Minimal Configuration for vManage – System
  • Create a Minimal Configuration for vManage – VPN 0
  • Display the Running Configuration: System Section
  • Verify the Ethernet Interfaces
  • Time and NTP
  • Login to vManage Interface
  • View the Dashboard
• Lesson 7: Create vBond VM Instance on ESXi or KVM
  • vBond Downloads Availability
  • Controller Deployment – vBond
  • vBond Controller Server Recommendations
  • Deploy vBond VM Instance on ESXi
  • Deploy vBond VM Instance (1)
  • vBond Console Login
  • Create a Minimal Configuration for vBond – System
  • Create a Minimal Configuration for vBond – VPN 0
  • Display the Running Configuration: System Section
  • Verify the Ethernet Interfaces
  • Time and NTP
• Lesson 8: Create vSmart VM Instance on ESXi or KVM
  • vSmart Downloads Availability
  • vSmart Controller Server Recommendations
  • Deploy vSmart VM Instance on ESXi
  • Deploy vSmart VM Instance (1)
  • Create a Minimal Configuration for vSmart – System
  • Create a Minimal Configuration for vSmart – VPN 0
  • Display the Running Configuration: System Section
  • Verify the Ethernet Interfaces
  • Time and NTP
• Lesson 9: Add Controllers to vManage
  • Integrating Controllers into SD-WAN
  • Set Organization Name in vManage
  • Add the vBond Controllers to vManage
  • Add the vSmart Controllers to vManage
• Lesson 10: Enterprise CA Configuration
  • Generate Certificates for vBond
  • Request a Certificate
  • Download the Certificate
  • Install the Certificate
  • Certificate Installed on Controllers
• Lesson 11: vManage Multitenant Mode
  • Controller Tenancy – Single Tenant
  • vManage Multi-Tenancy in 20.4 / 17.4
  • Migrate Single-Tenant Cisco SD-WAN Overlay to Multitenant
  • Controller Tenancy – Pre 20.4 Software
  • Multi-Tenancy Options
  • RBAC by VPN
  • Multitenant vManage NMS
  • Place the vManage NMS into Multitenant Mode
  • Tenant Menu
  • Add Tenant
• Lesson 12: Upgrade the SD-WAN Environment
  • SD-WAN Upgrade Images – Controllers
  • Cisco vManage Upgrade Paths
  • SD-WAN Upgrade Images – WAN Edges
  • Upgrade Images Merge into Unified for IOS XE in 17.2
  • Best Practices for Software Upgrades
  • Upload Software Images to the Repository
  • Upload Images to vManage
  • Upload Virtual Images for Security on IOS-XE (1)
• Lesson 13: Upgrade vManage
  • Software Upgrade Location and Platform Version
  • vManage OS Update Scheduled (1)
  • Activation of New vManage Images
  • Activation of New Images
  • vManage Activation Complete
  • vBond Upgrades
  • vSmart Upgrades
  • vSmart Activation
  • Upgrading Devices (1)
  • SDWAN Upgrades – Set Default Image
  • SDWAN Upgrade – Delete Old Images
• Lesson 14: Upgrade Devices via CLI
  • SDWAN Upgrade – CLI – Transfer Files
  • SDWAN CLI Upgrade – Install Image
  • SDWAN CLI Upgrade – Activate Image
  • SDWAN CLI Upgrade – Verify Image Activation
  • SDWAN CLI Upgrade – Set Default Image
  • SDWAN CLI Upgrade – Delete Old Image
  • SDWAN IOS-XE Upgrade – CLI
  • SDWAN CLI IOS-XE Upgrade – Install Image
  • SDWAN CLI IOS-XE Upgrade – Activate Image
  • SDWAN CLI IOS-XE Upgrade – Verify Image Activation
  • SDWAN IOS-XE CLI Upgrade – Set Default Image
  • SDWAN IOS-XE CLI Upgrade – Delete Old Image
• Lesson 15: Check Control Plane
  • Check Control Plane – vManage
  • Check Control Plane – vBond
  • Check Control Plane – vSmart
• Lesson 16: Controller High Availability and Scale
  • High Availability and Scale
  • Horizontal Solution Scale – Data Plane
  • Using Affinity to Manage Network Scaling
  • Redundancy – vSmart Control Controllers
  • Redundancy – vManage System
  • vManage Redundancy
  • Cluster Management Status
  • vManage CLI Status Command
  • Cisco vManage Cross-DC High Availability 19.2 and above
  • Understanding the vManage Cluster Messaging Interface
• Module Summary

Module 3: Cisco SD-WAN Allow Lists and Certificates

• Module Topics
• Lesson 1: Certificates
  • Public Key Infrastructure
  • Types of Certificates
  • Certificate Trust Chain
  • Certificate Authority Options
  • WAN Edge and Controllers Allow Lists
  • Certificate-Based Trust Allow Lists
  • Digitally Signed WAN Edge list – Manual Download
  • Digitally Signed WAN Edge list – Smart Account
  • Control Plane Allow-Listing
  • Controllers Identity
  • Establishing IOS-XE SD-WAN Edge Router Identity
  • Cisco IOS-XE Router Certificates
  • Serial Allow Listing SDWAN WAN Edge Routers
  • Certificate Revocation – 20.7 / 17.7 and Onward
  • Secure Control Channel – WAN Edge Routers
  • Secure Control Channel: WAN Edge
  • Zero Touch Provisioning – vEdge
• Lesson 2: Certificate Configuration
  • Organization Name and vBond Configuration
  • Controller Certificate Authorization – Cisco Automated
  • Controller Certificate Authorization – Symantec Automated
  • Controller Certificate Authorization – Symantec Manual
  • Controller Certificate Authorization- Enterprise Root CA
  • Configure Hardware WAN Edge Certificate Authorization Settings
  • Configure WAN Edge Cloud Certificate Authorization Settings
  • Generate Web Server Certificate – CSR
  • Import Web Server Certificate
  • View Web Server Certificate
  • Enterprise Feature Certificate Authorization
• Lesson 3: Monitoring and Troubleshooting Certificates
  • Monitor Certificates using Dashboard
  • Ensure WAN Edge Certificates are Valid
  • Check Certificate Properties in GUI
  • Check Certificate Properties in CLI
  • Troubleshooting – View Installed Certificate
  • Troubleshooting – View the Root CA Certificate
  • Check Certificate Expiration Date
• Module Summary

Module 4: Cisco SD-WAN Platforms

• Module Topics
• Lesson 1: Platform Positioning
  • Cisco SD-WAN Routing Portfolio
  • Picking a Device Platform
  • What’s in a Name?
  • IOS Version Images
  • Cisco vEdge Routers
    • vEdge 100
    • vEdge 1000
    • vEdge 2000
    • vEdge 5000
  • Scalability Considerations Data Plane and IPsec
  • vEdge Cloud Virtual Routers
    • Cisco ISR1100-4G
    • Cisco ISR1100-6G
  • SDWAN Throughput across ISR1100 (Viptela OS)
  • XE-SDWAN for ISR1100
  • Cisco ASR 1000 Series Routers: Overview
  • Cisco ASR1000 Series SD-WAN Routers
  • Cisco IOS XE Software Architecture
  • Cisco 4000 Series ISR SDWAN Portfolio
    • Cisco ISR 4461 WAN/SDWAN Router
    • Cisco ISR 4451
    • Cisco ISR 4431
    • Cisco ISR 4351
    • Cisco ISR 4331
    • Cisco ISR 4321
    • Cisco ISR 4221
  • Introducing UADP on ISR4K SDWAN IOS XE 17.4
  • UADP Switch Modules
  • ISR 1100 Features
  • ISR 1100 Portfolio
  • Cisco IR1101 – Compact and flexible
• Lesson 2: Cellular Gateways for SDWAN
  • SD-WAN Connectivity Options
    • *G is Supposed to be WAN Tech, Right?
    • How does 5G improve on 4G?
    • Cellular Gateway Platforms
    • Why Cellular Gateway is needed for High Quality Wireless WAN
    • Deployment Connectivity
    • Cellular Gateways
    • Cellular Gateway Connections
    • Use Case for SDWAN Wireless
  • Last Resort Circuit
  • Cisco Catalyst 8000 Edge Platforms Family
    • Catalyst 8000 Edge Routers
    • Catalyst 8500
    • Catalyst 8500 Third Generation QFP ASIC Innovation
    • Catalyst 8500 for SD-WAN
    • Catalyst 8500 Series Edge Platforms
  • C8500-12X4QC Port Connectivity
    • 100GE, 40GE Connectivity Options (1)
    • High Density 10GE, 1GE Connectivity Options
  • Catalyst 8500L Series Edge Platforms
    • ASR1002-HX vs C8500-12X4QC
    • ASR1001-HX vs C8500-12X
    • ASR1001-X vs C8500L-8S4X
  • Catalyst 8300
    • Cisco Catalyst 8300, 8200 Edge Platforms
    • Cisco Catalyst 8300 Series Edge Platforms
    • ISR 4451 vs C8300-2N2S-xxxx
    • ISR 4431 vs C8300-1N1S-xxxx
    • Catalyst 8300 Supported Modules
• Lesson 3: Catalyst 8200 Series
  • C8200-1N-4T
  • ISR 4331 vs C8200-1N-4T
  • Catalyst 8200 vs ISR4331 Throughput
• Lesson 4: Catalyst 8000v Series Virtual Router
  • Catalyst 8000V continues to build on CSR 1000V
    • Virtual Router Convergence
    • Cisco Catalyst 8000V Edge Software
  • ENCS NVF Platforms
    • ENCS 5400 Series
• Lesson 5: Adding IOS-XE to the Fabric
  • Zero Touch Provisioning – WAN Edge Appliance
  • ZTP – WAN Edge – Static IP Support
  • One Touch Provisioning
    • One Touch Provisioning using Mobile Application
    • One Touch Provisioning Phase-1 – 17.5
    • One Touch Provisioning Phase 2 – 17.6
  • Installing the Mobile App
  • SD-WAN 20.6 – Quick Connect Onboarding
    • Quick Connect Workflow
    • Quick Connect – Getting Started
    • Quick Connect – Pre-requisites
    • Quick Connect – Process Overview
    • Quick Connect – Progress Bar
    • Quick Connect – Sync Device Inventory
    • Quick Connect – Sync Device Inventory – From Smart Account
    • Quick Connect – Sync Device Inventory – Upload Device List
    • Quick Connect – Sync Device Inventory – Skip if Already Done
    • Quick Connect – Select Devices
    • Quick Connect – View Sync Device Inventory Task Details
    • Quick Connect – Return to Workflow
    • Quick Connect – Review Workflow – at any Stage
    • Quick Connect – Add and Review Device Configuration
    • Export, Edit, and Import the Config
    • Quick Connect – Summary
    • Quick Connect – Preview CLI
    • Quick Connect – Deploy
    • Quick Connect – PnP/ZTP
    • Quick Connect – Manual On-boarding
  • IOS-XE SDWAN
  • Cisco SD-WAN Getting Started Guide
  • Cisco Smart Accounts
  • WAN Edge Provisioning
  • Cisco Software Central PNP Portal – software.cisco.com
  • Cisco Plug and Play Portal
  • Plug and Play Connect – Add Controller Profiles
  • Cisco IOS-XE Router Certificates
  • Add Device to the Plug and Play Portal
  • Add Device – Identify Sources
  • Add Device – Identify Device (1)
• Lesson 6: Manually Provision SD-WAN IOS-XE
  • Manually Provision IOS-XE (1)
  • OS Package File
  • Single Image for IOS XE and IOS XE SD-WAN
  • Operational Mode Change
  • Greenfield, Brownfield Image Upgrade Scenarios
  • Install Requirements
  • Provisioning using Bootstrap Config File
• Lesson 7: 17.X IOS-XE PnP Provisioning
  • Single Image: Boot Up Sequence
• Lesson 8: Configuration > Devices
  • Generate Bootstrap for a WAN Edge Cloud Router
  • Generate Bootstrap Configuration for a vEdge Cloud Router
  • Running Device Configuration
  • View a Device’s Local Configuration
  • Template Log
  • Delete a WAN Edge Router
  • Decommission a WAN Edge Cloud Router
  • View Status of Device Bring-up
• Lesson 9: High Availability and Redundancy Overview
  • Redundancy – Site with LAN Routing
  • Redundancy – Site with LAN Bridging
  • Redundancy – Hot Standby Router Protocol (HSRP) 20.7 onward
  • Transport Redundancy – Meshed
  • Redundancy – Meshed Transports
  • Redundancy – Extended Transports
  • Transport Redundancy – TLOC Extension
  • TLOC Extension Configuration
• Module Summary

Module 5: Cisco SD-WAN Fabric and OMP

• Module Topics
• Lesson 1: Why Fabric Architectures?
  • Overlay Management Protocol (OMP) – Unified Control Plane
  • Cisco SD-WAN Terminology – Transport / Service
  • Cisco SD-WAN Terminology – OMP / Site-ID
  • Cisco SD-WAN Terminology – System IP / Organization Name
  • Cisco SD-WAN Terminology
  • End-to-End Segmentation with Multi-Topology
  • Fabric Operation Walk-Through
• Lesson 2: Overlay Management Protocol (OMP)
  • OMP Route Types and Prominent Attributes
  • OMP Routes – Routes learned from a site-local network
• Lesson 3: Transport Locators (TLOCs)
  • TLOC Route
  • TLOC Preference vs Weight
  • OMP Service Route Attributes
  • Significance of Interface (TLOC) Color
  • TLOC Colors
• Lesson 4: Overlay Routing
  • Multi-Domain Routing Fabric
• Lesson 5: OMP Service / Route Timer
  • Graceful Restart for OMP
  • Transport Independent Fabric
  • Unicast Overlay Routing Overview
  • Advertise Local Routes
  • OMP Route Redistribution
  • Administrative Distance
  • NAT Traversal
  • WAN Communication – Traffic Forwarding
• Lesson 6: Operational Commands
  • Operational Commands – vSmart Perspective
  • Operational Commands – WAN Edge Perspective
  • Operational Commands – show omp routes vpn 10 | tab
  • Operational Commands – show ip routes
  • Operational Commands
• Module Summary

Module 6: Cisco SD-WAN Security

• Module Topics
• Lesson 1: Security Solutions
• Lesson 2: Firewall Ports used in SDWAN
  • DDoS Protection for vEdge Routers
  • DDoS Protection for Controllers
  • Firewall Rules for Controllers
  • Firewall Ports Used in Cisco SDWAN
  • Firewalls Ports – DTLS
  • Firewalls Ports – TLS
  • Ports Used by Cisco SDWAN Devices Running Multiple vCPUs
  • Administrative Ports Used by vManage NMS
  • vManage Cluster Ports
  • Anti-Replay Protection
• Lesson 3: SD-WAN Security and Segmentation
  • Current Challenges in Deploying Segmentation
  • WAN Edge VPNs and Security Zoning
  • VPN Labels
  • Secure Segmentation
  • Segmentation and Multi-Topology
  • Data Plane Privacy and Encryption
  • Data Plane Privacy (Pairwise)
  • Pairwise IPSec Keys for SA
  • Data Plane Integrity
  • Application Filtering
  • Application Filtering with Local Firewall
  • Layered Branch Security with SD-WAN
  • Service Based Traffic Engineering
  • Regional Secure Perimeter – Single Service
  • Regional Secure Perimeter – Multiple Services
  • L4-L7 Regional Secure Perimeter
  • Regional Internet Security
  • DIA Security
  • SD-WAN Integrated Security
  • SD-WAN Unified Security Policy (20.6)
  • Security Custom Options
  • Pre-Create Unified Security Features
  • Unified IPS Policy
  • New Unified Security Policy – Next Generation Firewall
  • NG Firewall Configuration
  • Create an Advanced Inspection Profile to be used with Rule / RuleSets
  • New Unified Firewall Rule with Advanced Inspections Profile
  • Enterprise Firewall
  • How FQDN Works?
  • Use Case: Intra-Zone Policy
  • Use Case: Self-Zone Policy
  • ZBFW: DIA/DCA Security
  • High Speed Logging (HSL)
  • Cloud Delivered Firewall
  • Intrusion Prevention
  • Snort IPS/IDS & Web Filtering Architecture
  • URL Filtering
  • URL-Filtering (URL-F) Database Profiles
  • How often URL-Filtering Database gets Updated?
  • DNS/Web-layer Security
  • DNS/Web-layer Security – Solution Overview
  • Cisco Cloud Security
  • Cloud Security with Zscaler
  • Increased Throughput Capabilities per Router
  • Layer7 Health Check
  • Advanced Malware Protection
  • TLS/SSL Decryption (MiTM Proxy)
• Lesson 4: SD-WAN Security Configuration
  • WAN Edge VPNs and Security Zoning
  • Security Configuration
  • Legacy Security Policy
  • SD-WAN Security Workflow
  • Add Firewall Policy
  • Add Rule to Firewall Policy
  • Add Rule to Deny and Log Traffic
  • Review Inspect and Deny Rules
  • Create Firewall Zones
  • Create Source Firewall Zone
  • Create Destination Firewall Zone
  • Create Firewall Zone Pair
  • Firewall Policy
  • Intrusion Prevention Policy
  • Intrusion Prevention Policy – Add Target VPNs
  • Intrusion Prevention Policy – Configuration
  • Intrusion Prevention Policy – Advanced Configuration
  • Intrusion Prevention Policy – Save IPS Configuration
  • Intrusion Prevention Policy
  • Add URL Filtering Policy
  • URL Filtering Policy – Add Target VPNs
  • URL Filtering Policy – Basic Configuration
  • URL Filtering Policy – Advanced Configuration
  • URL Filtering Policy – Save Configuration
  • URL Filtering Policy
  • Advanced Malware Protection
  • Advanced Malware Protection – Add Target VPNs
  • Advanced Malware Protection – Basic Configuration
  • Advanced Malware Protection – File Analysis Configuration
  • Advanced Malware Protection – Save Configuration
  • Advanced Malware Protection
  • DNS Security Policy
  • Umbrella API Key
  • DNS Security Policy – Add Target VPN
  • DNS Security Policy Basic Configuration
  • DNS Security Policy – Save Configuration
  • DNS Security Policy
  • TLS/SSL Decryption
  • TLS/SSL Decryption Policy Configuration
  • Configure Trusted CA
  • TLS/SSL Decryption Policy Configuration
  • TLS/SSL Decryption Policy Decryption Rule
  • Security Policy – Configuration
  • Security Policy – Preview
  • Edit Template and Apply Security Policy
  • Security Policy – Apply Security Policy to Template
• Module Summary

Module 7: SD-WAN QoS

• Module Topics
• Lesson 1: Application Visibility and Recognition (NBAR / QoS)
  • What is AppQoE?
  • NBAR Agents
  • Multidimensional Application Quality of Experience
  • Application Visibility and Recognition
  • vEdge Router QoS
  • Device QoS: Queuing
  • WAN Edge Router Traffic Prioritization
  • Device QoS: Shaping
  • Device QoS: Policing
  • Policing with Packet Loss Priority
  • DSCP and COS (802.1p) Re-marking
  • Cisco SD-WAN QOS Features
  • Per-Tunnel QoS support on SD-WAN
  • SD-AVC Service
  • Adaptive QoS on IOS-XE SD-WAN
  • IOS-XE 17.3 – Adaptive QoS
  • Per-VPN QOS Working
  • Monitor Per-Tunnel QoS
• Lesson 2: Bidirectional Forwarding Detection (BFD)
  • Bidirectional Forwarding Detection (BFD)
  • Critical Applications SLA
  • BFD Calculation App-Route Policies
  • Per-Class BFD Probing for AAR
  • Application Aware Timers – Policy Example
  • Troubleshooting BFD Session Issues
• Lesson 3: Forward Error Correction (FEC) / Packet Duplication
• Lesson 4: TCP Optimization
  • Forward Error Correction (FEC)
  • FEC and Multiple Circuits
  • Forward Error Correction (FEC) Modes & Configuration
  • Packet Duplication
  • Packet Duplication and Application Aware Routing
  • TCP Optimization Platforms
  • DRE Optimization (cEdge)
  • DRE Optimization Enhancements
  • TCP Optimization Design Considerations
  • Multiple Service Nodes for AppQoE
  • TCP Optimization on IOS-XE
  • Path MTU Discovery
  • Optimal MTU with Host PMTUD
  • Optimal MTU with TCP MSS Adjust
  • Differentiated Services – Quality of Service
  • Localized Data Policy (QoS) Configuration
  • Forwarding and QoS Example
• Module Summary

Module 8: Configuring vManage

• Module Topics
• Lesson 1: vManage Dashboard
  • Cisco SDWAN Management
  • Cisco vManage Communication with External Servers via Proxy
  • vManage GUI Menu – Icon vs Expanded
  • vManage GUI Menu – 20.7 and Onward
  • vManage Main Monitor Overview
  • vManage VPN Dashboard
  • vManage Security Dashboard
  • Main Dashboard – Device Pane
  • Reboot Pane
  • Certificates Pane
  • Control Status Pane
  • Site Health View Pane
  • Transport Interface Distribution
  • WAN Edge Inventory Pane
  • WAN Edge Health Pane
  • Transport Health Pane
  • Top Applications
  • Application-Aware Routing Pane
  • Cloud Services – SAAS
  • Cloud Services – Cloud onRamp for IAAS
• Lesson 2: Monitoring
  • Monitor > Geography
  • Monitor > Network (Device)
  • Monitor > Network (Device) DC1-vEdge1 – Applications
  • Monitor > Network (Device) DC1-vEdge1 – Interfaces
  • Monitor > Network (Device) DC1-vEdge1 – WAN > TLOC
  • Monitor > Network (Device) DC1-vEdge1 – WAN > Tunnel
  • Monitor > Network (Device) DC1-vEdge1 – Control Connections
  • Monitor > Network (Device) DC1-vEdge1 – System Status
  • Monitor > Network (Device) DC1-vEdge1 – Events
  • Monitor > Network (Device) DC1-WAN Edge1 – ACL Logs
  • Monitor > Network (Device) DC1-vEdge1 – Troubleshooting
  • Monitor > Network (Device) – Real Time (Show Commands)
  • Monitor > Alarms
  • Monitor > Events
  • Monitor > Audit Log
  • Monitor > ACL Log
• Lesson 3: Tools
  • Tools > SSH Terminal
  • Tools > Rediscover Network
  • Tools > Operation Commands
• Lesson 4: Settings
  • vManage > Administration > Settings
  • Enable Email Notifications
  • Enforce Software Version on WAN Edge Routers
  • Create a Custom Banner
  • Settings > Enable Reverse Proxy
  • Settings > HTTP/HTTPS Proxy Server
  • Settings > Statistics Settings
  • Settings > Cloud Onramp for SaaS
  • Settings > Cloud Services / vAnalytics Platform
  • Settings > vManage Client Session Timeout
  • Settings > vManage Session / Server Session Timeouts
  • Settings > Enable Data Stream Collection
  • Settings > Tenancy Mode
  • Settings > Set Interval to Collect Device Statistic
  • Settings > vManage Maintenance Window
  • Settings > Single Sign-On – Identity Provider Settings
  • Settings > vManage Statistics Database
  • Settings > Google Map API Key
  • Settings > Software Installation Timeout
  • Settings > IPS Signature Update
  • Settings > Smart Account Credentials
• Lesson 5: Resource Groups / Users / Groups
  • Resource Groups / Users / Groups
  • Configuring AAA User Accounts
  • Resource Groups
  • Creating Users in CLI
  • Creating Users via vManage
  • User Account Management
  • Creating Groups
  • Basic Group Privilege
  • Operator Group Privilege
  • Netadmin Group Privilege
  • Add Group and Permissions
  • Which Policies have Granular RBAC (R/W)?
  • Creating User Groups with Policy RBAC – GUI
  • Create Users and Assign to User Groups
  • Edit Group Permissions or Delete Group
  • Configuring RADIUS
  • Configuring RADIUS Authentication
  • Configuring TACACS+ Authentication
  • Configuring the Authentication Order
  • Configuring NAS Attributes
  • Show Users Command
  • show AAA Usergroup Commands
  • Administration > VPN Groups > Add VPN Group
  • Administration > VPN Segments
  • License Management
  • License Management – Smart Account Management
  • License Management – Smart Account Management Reporting
  • Network Wide Path Insight
• Module Summary

Module 9: Creating and Applying SD-WAN Templates

• Module Topics
• Lesson 1: Templates
  • Build your Configuration with Templates
  • Device Templates
• Lesson 2: Feature Templates
• Lesson 3: Device Templates
• Lesson 4: System Feature Templates
• Lesson 5: Apply Template to a Device
• Module Summary
• Centralized Device Configuration via Templates
• Template Editor
• Template Options
• Create Template
• Centralized Device Configuration via Templates
• Create a Device Template from the CLI
• Template Parameters
• Build a Feature Template
• Feature Templates
• Create Feature Templates for the Device
• Edit Feature Templates
• System Feature Template
• Device Template
• Create VPN 0 Feature Template (1)
• Create VPN Interface Feature Template (1)
• Device Template Management VPN 0 and VPN 512 Configuration
• Logging Feature Template (1)
• OMP Feature Template (1)
• Additional Feature Templates
• Attach Devices to Template (1)
• Schedule Configuration
• Configuration Rollback
• Create a CLI Template

Module 10: Creating and Applying Policies

• Module Topics
• Lesson 1: Policy Concepts
  • SD-WAN Policy and Intent Based Networking
  • Cisco SD-WAN Policy Architecture
  • Policy Configuration Overview
  • Policy Framework – Centralized and Localized Policies
  • Cisco SD-WAN Policy Execution
  • Custom Policies
• Lesson 2: Centralized Policies (Control, Data, AppRoute, cFlowd)
  • vManage GUI Centralized Policy Wizard
  • Centralized Policies
  • vSmart Overlay Policy Architecture
  • Centralized Policy Driven WAN Infrastructure
  • Building Blocks of Centralized Policies
  • Construction of SD-WAN Policies
  • Centralized Policy Construction
  • vSmart Policy Construction – Lists
  • vSmart Policy Construction – Policies
  • vSmart Policy Construction – Policy Application
  • vSmart Policy Example
  • Cisco SD-WAN Centralized Policy Architecture
  • Where Centralized Policies are Attached
  • Centralized Control Policy: Inbound vs. Outbound Route Policy
  • vSmart Policy Processing
• Lesson 3: Centralized Control Policies-Multi-Domain Data Plane Case Studies
  • Control Policy Case Study
• Lesson 4: Centralized Control Policy Components
  • Centralized Control Policies
  • Centralized Control Policy
  • Centralized CLI Policy
  • vManage Configuration Procedure
  • OMP Route Match Attributes
  • TLOC Route Match Attributes
• Lesson 5: Traffic Engineering
  • Centralized Control Policy Configuration – Traffic Engineering
  • Traffic Engineering Examples
  • Traffic Engineering Example (3) – Multiple West Sites
  • Creating Arbitrary Topologies
  • Control Policy Examples – Service Chaining
  • Control Policy Service Chaining – Site 4 Service Originator
  • Control Policy Service Chaining – vSmart Policy 1
• Lesson 6: SD-WAN Policy Framework – Use Cases
  • Control Policy Case #1
  • Control Policy Example – Data Center Priority
  • Control Policy Case #2
  • Control Policy Example – Arbitrary VPN Topologies
  • Control Policy Case #3
  • Control Policy Case #4
  • Control Policy Case #5
• Lesson 7: Centralized Policy Framework – App-Route Policies
  • App-Aware Routing Policies
  • Deep Packet Inspection for Identifying Traffic
  • Enable Deep Packet Inspection via Local Policy
  • Application-Aware Routing Policy
  • Application Aware Routing
  • Application Aware Routing Policy Example
  • Application-Aware Routing Policy Configuration
  • App-Route Policies
• Lesson 8: Centralized Data Polices
  • Configuring Centralized Data Policy
  • Data Policy – Applications and Services
  • Data Policy Application
  • Centralized Data Policy Configuration
  • Data Policy NAT
  • Data Policy NAT – vSmart Policy
  • Data Policy Case #1
  • Data Policy Case #2
  • Centralized Data Policy Configuration Procedure
  • Centralized Data Policy Configuration
• Lesson 9: Centralized Data Policies –VPN Membership Policy
  • VPN Membership Policy
  • VPN Membership Policy Examples
• Lesson 10: Centralized Data Polices – cFlowd Policy
  • cFlowd Policy Example
  • cFlowd Flow Data Collection
  • Enable Netflow
  • cFlowd Example
• Lesson 11: Policy Framework – Internet Breakout / DIA
  • Internet Breakout / DIA
  • Internet Breakout Leverage
  • SD-WAN Internet Breakout Options
• Lesson 12: SD-WAN Local Policies
  • Localized Policies
  • Local Control Policy
  • Local CLI Policy
  • Local Control Policy Example
  • WAN Edge Routing Policy Architecture
  • Localized Control Policy Configuration (1)
  • Policy Management
• Module Summary

Module 11: SD-WAN Cloud Adoption

• Module Topics
• Lesson 1: Cloud Services Adoption
• Lesson 2: Cloud OnRamp – SaaS
  • Microsoft 365 Optimization with Cisco SD-WAN
  • Cloud OnRamp for SaaS Workflow – Site Types
  • Optimize SaaS with Cloud-express Single DIA
  • Cloud onRamp for SaaS – Dual DIA
  • Cloud onRamp for SaaS (Dual ISP)
  • SaaS Cloud OnRamp – DIA and Gateways
  • Cloud onRamp for SaaS (Gateway)
  • Performance Measurement
  • vQoE – Cisco SDWAN Quality of Experience Score
  • Cloud OnRamp for SaaS via SIG
  • Direct Internet Access
  • DNS settings on VPN0
  • NAT Settings on VPN0 Interface
  • Enable Cloud On-Ramp
  • Cloud On-Ramp for SaaS WorkFlow – Adding Applications
  • Cloud On-Ramp for SaaS WorkFlow – Adding DIA Sites
  • Cloud OnRamp for SaaS WorkFlow – Adding Client Sites
  • Cloud On-Ramp for SaaS WorkFlow – Adding Gateway Sites
  • Cloud On-Ramp Dashboard
  • Cloud On-Ramp for SaaS QoE – Application Drill Down (1)
  • Monitor > Network > Realtime > CloudExpress Applications
  • Troubleshooting Cloud On-Ramp on Gateway Exit
  • Troubleshooting OMP metrics
  • Troubleshooting Cloud Express on Local Exit
• Lesson 3: Cloud-Onramp for IAAS / Multicloud
  • SD-WAN Landscape (Mixture of Traditional Networking and Cloud)
  • SD-WAN Evolution
  • Network Evolution at Hyper-Speed
  • SD-WAN Cloud Paths
  • SD-WAN Cloud Networking Integrations
  • Cloud OnRamp for Multicloud
  • Cisco Cloud OnRamp with AWS Transit Gateway Connect
  • Cisco SD-WAN integration with Microsoft vWAN
  • Cisco SD-WAN Cloud Hub with Google Cloud
  • SD-WAN Cloud Interconnect with Megaport and Equinix
  • Cisco SD-WAN Cloud OnRamp for Colocation
  • Cloud onRamp for Colocation and Cloud Interconnect
  • Cisco SD-WAN Cloud OnRamp Facilitates Your Multicloud Journey
  • Cisco SD-WAN Cloud Interconnect
  • Cloud Interconnect?
  • Multicloud: SD-WAN Beyond the Branch
  • SD-WAN Cloud Implementation – Site-to-Cloud
  • SD-WAN Cloud Implementation – Site-to-Site
  • Cloud Connectivity Quick Reference
  • Multi-Cloud Connectivity – Cloud On-Ramp IaaS
  • Public Cloud Connectivity Options
  • Cloud onRamp
  • Cloud onRamp for IaaS – How it works
  • IaaS and SDWAN – Multi-Cloud Deployment
  • Cloud On-Ramp for IaaS – Attached Compute
  • Cloud On-Ramp for IaaS – Gateway VPC/VNET – Fully Automated via vManage
  • Cloud on-Ramp for IaaS: Automated Azure
  • Cloud Deployment
  • Cloud Deployment – Device Template
  • Cloud On-Ramp for Multi-Cloud Dashboard
  • Associate Cloud Account
  • Cloud Global Settings
  • Host Private Networks
  • Host Private Networks / TAG
  • Create Cloud Gateway
  • Attach Host VNets
  • Map VNET to VPN
  • Cloud On-Ramp for IaaS Dashboard – WorkFlow
  • Cloud On-Ramp for IaaS – Dashboard
  • Cloud On-Ramp IaaS – Monitoring
• Module Summary

Module 12: vAnalytics Overview

• Module Topics
• Lesson 1: vAnalytics Overview
  • vAnalytics Release 2.0: Better Visibility and Control
  • vManage Scalability Considerations
  • When to Consider a 3rd Party Collector
  • vManage vs vAnalytics
  • Why use vAnalytics?
  • vAnalytics Data Flow
  • Metadata Collected by vAnalytics (XML)
  • Customer Onboarding
  • Enable vAnalytics Process
  • Enable vAnalytics in vManage
  • vAnalytics – Customer Data
  • vAnalytics Menus Structure
  • vAnalytics Menu Toolbar Icons
  • vAnalytics Time Range Reporting Increments
  • vAnalytics Metrics
• Lesson 2: vAnalytics Dashboard
  • vAnalytics Summary Dashboard (1)
  • vAnalytics Application Dashboard (1)
  • vAnalytics Popular Application Dashboard (1)
• Lesson 3: vAnalytics Applications
  • Application / Flow Centric
  • Application – Performance and Usage (1)
  • Application Family – Performance and Usage (1)
  • Application Class – Performance and Usage (1)
  • Application Usage and Performance Across Network – Tunnel (1)
  • Application Usage and Performance Across Network – TLOC (1)
  • Application Usage / Performance across Network – Transport Path (1)
  • Application Usage / Performance across Network – Transport Color (1)
• Lesson 4: vAnalytics Network Availability
  • Network Centric Awareness
  • Network – Site Performance and Usage – Site (1)
  • Network – Site Performance and Usage – Edge Device (1)
  • Network – Site Performance and Usage – Carrier (1)
  • Network – Device Inventory (1)
  • Network – TLOC (Circuits) – Performance and Usage
  • Network – Transport Path – Performance and Usage
  • Network – Transport Local Color – Performance and Usage
  • Network – Tunnels – Performance and Usage
• Lesson 5: vAnaylics Flows
  • Flows – Network Flow – Top Flows (Source & Destination)
  • Flows – Network Flow – Top Talkers (1)
  • Flows – Network Flow – Top Destinations (1)
• Module Summary

Module 13: Monitoring & Troubleshooting the SD-WAN Solution

• Module Topics
• Lesson 1: SD-WAN Support Options
  • Contacting Cisco TAC Support
  • Contact Cisco TAC Severities
  • Cisco TAC Case Tracking
• Lesson 2: Monitoring
  • SD-WAN Monitoring Tools
  • Application Visibility with External Collectors
  • Application Visibility + ART with External Collectors
  • Network Wide Path Insight (NWPI)
• Lesson 3: ThousandEyes
  • Extended visibility with Cisco SD-WAN + ThousandEyes
  • SD-WAN + ThousandEyes Supported Platforms
  • Deployment Options
  • ThousandEyes Probing
• Lesson 4: Compliment with LiveAction
  • LiveAction – End-to-End visibility of app and network
• Lesson 5: SNMP
  • SNMP MIBs Supported on WAN Edges
  • CISCO–SDWAN-OPER-SYSTEM-MIB – Supported Attributes
  • CISCO–SDWAN-APP-ROUTE-MIB – Supported Attributes
  • CISCO–SDWAN-BFD-MIB – Supported Attributes
  • CISCO–SDWAN-POLICY-MIB – Supported Attributes (part 1)
  • CISCO–SDWAN-SECURITY-MIB – supported attributes
• Lesson 6: Controller Failures
  • Recovering from a Failure in the Control Plane
  • Recovering from a vSmart Controller Failure
  • Recovering from a vBond Orchestrator Failure
• Lesson 7: Troubleshooting Controllers
  • Troubleshooting vManage Slowness
  • Template Push failure
  • Template Push failure (Logs)
  • vManage Logs
  • Collecting Admin-Tech
  • Enable Debugs
• Lesson 8: Troubleshooting Devices When They Don’t Join the Fabric
  • View Status of Device Bring-up
  • WAN Edge Requirements for Establishing Control Connections
  • WAN Edge Cannot Join the SD-WAN Overlay (Fabric)
  • Control Connections Failing
  • DTLS Connection Failure
  • TLOC Disabled
  • Transient Conditions
  • Serial Number(s) NOT Present
  • Certificate Revoked/Invalidated
  • Certificate Installation Failed
  • Organization-name Mismatch
  • DTLS Connection Debug
• Lesson 9: Device Configuration and Upgrades Failure
  • Self-Healing – Software Upgrade and Configuration Changes
  • Device Rejects a Template
• Lesson 10: Troubleshooting cEdge
  • Troubleshooting Data Plane on cEdge – BFD
  • Troubleshooting Data Plane on cEdge – EPC
  • Troubleshooting Data Plane on cEdge – Packet-Tracer
  • Troubleshooting Data Plane on cEdge
  • cEdge Password Discovery
  • Factory Default a cEdge
• Lesson 11: Troubleshooting using vManage
  • Check Controller Status
  • Checking Control Connections
  • WAN Edge Health
  • Reboot / Reload Services / Reset Services on Controllers / Devices
  • Reset an Interface
  • Admin Tech
  • Reset Locked Out User on a Device
  • System Alarm
  • System Events
  • System Audit Log
• Lesson 12: Device Troubleshooting
  • Troubleshoot Configuration – Change to CLI Mode
  • Monitor > Network (Device) – {device} – System Status
  • Monitor > Network (Device) – {device} – System Status – Crash
  • Checking Interface Utilization
  • Checking Transport Quality
  • Monitor > Network (Device) – {device} – Control Connections
  • Monitor > Network (Device) – {device} – Events
  • Monitor > Network (Device) – {device} – Troubleshooting
  • Troubleshooting > Ping
  • Troubleshooting > Traceroute
  • Troubleshooting > Speed Test
  • Troubleshooting > Tunnel Health
  • Troubleshooting > Visualizing Application Paths
  • Troubleshooting > Packet Capture
  • Troubleshooting > Simulate Flows
  • Troubleshooting > Debug Logs
• Lesson 13: Using the GUI for cli show command Under Troubleshooting > Real-time
  • Monitor > Network – {Device} – Real Time (Show Commands)
  • Checking BFD connections
  • Troubleshooting Routing
  • Checking OMP Peers Detail
• Lesson 14: CLI Troubleshooting
  • vManage CLI Troubleshooting
  • Time Issues
  • Check vBond Control Connection
  • show orchestrator valid-vEdges
  • show orchestrator valid-vSmart
  • show orchestrator valid-vManage
  • CLI Troubleshooting Commands – show control connections
  • CLI Troubleshooting Commands – show control connections-history
  • clear orchestrator connections-history
  • Log Troubleshooting
  • vBond Look for Specific System IP in Logs
  • vManage Log
  • vManage Rest API Log
  • Display the Last 10 Log Messages
  • View the Root CA Certificate on vBond
  • View the Server Certificate on vBond
  • Using tcpdump to Capture Headers
  • show configuration rollback
  • Validate Command
• Lesson 15: vManage, APIs & Programmability
  • vManage REST APIs
  • REST Web Service
  • Requests and Response REST API Flow
  • Available API Calls
  • Viptela API Library and Documentation
  • REST API
  • URI Structure
  • Options for Working with REST APIs
  • REST API
  • Webhooks
  • Tools – Use the best tool you can afford
• Module Summary