WEBVTT

1
00:00.000 --> 00:07.040
So, for this challenge, we're tasked with answering some questions from each

2
00:07.040 --> 00:08.040
section

3
00:08.040 --> 00:12.440
to verify our understanding of the SD-WAN architecture.

4
00:12.440 --> 00:19.920
So, let's begin here with our first question from Discovering Cisco SD-WAN.

5
00:19.920 --> 00:26.330
Which component in Cisco SD-WAN is responsible for providing centralized orche

6
00:26.330 --> 00:27.440
stration and

7
00:27.440 --> 00:30.920
management of the entire network?
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

7
00:27.440 --> 00:30.920
management of the entire network?

8
00:30.920 --> 00:35.030
I'm going to approach this question a little bit differently than I

9
00:35.030 --> 00:36.480
traditionally do, which

10
00:36.480 --> 00:39.760
is just starting at the top and working our way down.

11
00:39.760 --> 00:43.700
I want to take care of getting the answers that are obviously incorrect out of

12
00:43.700 --> 00:44.160
the way

13
00:44.160 --> 00:48.720
first, because there's a little bit of a discussion we need to have here.

14
00:48.720 --> 00:53.480
So, let's start with our third answer, Cloud OnRamp.

15
00:53.480 --> 00:59.280
This is not at all what Cloud OnRamp is for, therefore Cloud OnRamp is an

16
00:59.280 --> 01:01.240
incorrect answer.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

16
00:59.280 --> 01:01.240
incorrect answer.

17
01:01.240 --> 01:04.400
Number four, SD-WAN Edge devices.

18
01:04.400 --> 01:06.400
Well, this is the data plane.

19
01:06.400 --> 01:09.000
These are what actually forward the traffic.

20
01:09.000 --> 01:13.920
These are not the ones that are actually making policy and enforcing policy.

21
01:13.920 --> 01:20.400
So, this brings us down to two choices, VManage and VSmart.

22
01:20.400 --> 01:26.440
I think what may throw people on this question is the centralized part and the

23
01:26.440 --> 01:27.440
management

24
01:27.440 --> 01:28.720
part.

25
01:28.720 --> 01:35.280
If you read just those two things, you may be tempted to lean towards VManage,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

25
01:28.720 --> 01:35.280
If you read just those two things, you may be tempted to lean towards VManage,

26
01:35.280 --> 01:35.560
because

27
01:35.560 --> 01:38.960
VManage does, of course, provide centralized management.

28
01:38.960 --> 01:46.640
However, if we look at this a little bit closer, it says actually providing it.

29
01:46.640 --> 01:51.200
In addition to saying providing, it also says orchestration.

30
01:51.200 --> 01:55.000
VManage doesn't really do orchestration.

31
01:55.000 --> 01:59.520
What they're getting at with this question with the providing and the orche

32
01:59.520 --> 02:00.640
stration is
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

32
01:59.520 --> 02:00.640
stration is

33
02:00.640 --> 02:05.160
which device actually does the work.

34
02:05.160 --> 02:11.480
It might be controlled by VManage, but VManage is not what actually performs

35
02:11.480 --> 02:12.720
the operation.

36
02:12.720 --> 02:18.610
So, in this case, I would say that VManage would be an incorrect answer, and

37
02:18.610 --> 02:18.880
that would

38
02:18.880 --> 02:25.840
leave VSmart to be our correct answer for this question as far as what actually

39
02:25.840 --> 02:26.800
provides

40
02:26.800 --> 02:30.920
the centralized orchestration and management.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

40
02:26.800 --> 02:30.920
the centralized orchestration and management.

41
02:30.920 --> 02:38.430
Next question from the VManage server, which role does the VManage server play

42
02:38.430 --> 02:39.600
in the Cisco

43
02:39.600 --> 02:42.120
SD-WAN architecture?

44
02:42.120 --> 02:47.110
Now we did just sort of discuss this in the previous question, so let's go over

45
02:47.110 --> 02:47.760
the answers

46
02:47.760 --> 02:49.240
nonetheless.

47
02:49.240 --> 02:55.000
Our first answer is centralized management of the SD-WAN infrastructure.

48
02:55.000 --> 02:58.360
And we did sort of just say that that's what it does.

49
02:58.360 --> 03:02.430
So we usually, I check all the other answers first, but in this case, I think
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

49
02:58.360 --> 03:02.430
So we usually, I check all the other answers first, but in this case, I think

50
03:02.430 --> 03:03.360
we can probably

51
03:03.360 --> 03:08.020
mark this one, and if we happen to find another answer that's better, we'll

52
03:08.020 --> 03:08.680
come back and

53
03:08.680 --> 03:10.040
change it.

54
03:10.040 --> 03:14.300
But even though confidence is high, I still always like to verify that all of

55
03:14.300 --> 03:14.920
the other

56
03:14.920 --> 03:21.160
answers are incorrect, providing secure connectivity between branch offices.

57
03:21.160 --> 03:27.330
No, that is not the job of VManage, so that is incorrect, delivering real-time

58
03:27.330 --> 03:28.200
monitoring

59
03:28.200 --> 03:30.040
of network traffic.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

59
03:28.200 --> 03:30.040
of network traffic.

60
03:30.040 --> 03:34.000
No, that's not something that VManage does either.

61
03:34.000 --> 03:38.270
It will show statistics and we can look at information and such, but it's not

62
03:38.270 --> 03:38.960
real-time

63
03:38.960 --> 03:40.880
monitoring.

64
03:40.880 --> 03:44.120
Implementing QoS policies for application traffic.

65
03:44.120 --> 03:48.280
Well, again, we're back to that implementing word again.

66
03:48.280 --> 03:53.440
VManage might manage those QoS policies, but it's not the one actually

67
03:53.440 --> 03:54.560
implementing

68
03:54.560 --> 03:55.560
them.

69
03:55.560 --> 04:00.680
So again, we have to be very careful of the verbiage on these questions.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

69
03:55.560 --> 04:00.680
So again, we have to be very careful of the verbiage on these questions.

70
04:00.680 --> 04:05.280
Our next question is from the VSmart controller.

71
04:05.280 --> 04:13.360
What is the primary protocol used by VSmart to control the WAN-edge devices?

72
04:13.360 --> 04:18.480
So we're not asking what protocols can be used on the WAN-edge devices.

73
04:18.480 --> 04:24.640
We're asking about the control plane between VSmart and the WAN-edge devices.

74
04:24.640 --> 04:26.920
So in this case, we'll just go down our list.

75
04:26.920 --> 04:29.920
We do not use EIGRP.

76
04:29.920 --> 04:34.400
We do not use BGP, even though it is sort of similar.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

76
04:29.920 --> 04:34.400
We do not use BGP, even though it is sort of similar.

77
04:34.400 --> 04:38.480
What we do in fact use is OMP.

78
04:38.480 --> 04:42.960
And just to finish this off, we do not use EIGMP either.

79
04:42.960 --> 04:45.320
That is for multicast.

80
04:45.320 --> 04:49.080
So our correct answer here would be OMP.

81
04:49.080 --> 04:55.280
That's our control plane protocol between VSmart and the WAN-edge.

82
04:55.280 --> 05:02.990
Next from the VBON server, what type of secure tunnel does VBON use between
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

82
04:55.280 --> 05:02.990
Next from the VBON server, what type of secure tunnel does VBON use between

83
05:02.990 --> 05:04.480
itself and the

84
05:04.480 --> 05:06.680
WAN-edge devices?

85
05:06.680 --> 05:11.080
So once again on this one, we'll go a little bit out of order.

86
05:11.080 --> 05:14.480
Let's knock out the answers that we know are incorrect.

87
05:14.480 --> 05:20.960
It does not use SSL, although there are such things as SSL secure tunnels.

88
05:20.960 --> 05:24.600
That's not anything that we're going to be using in this environment.

89
05:24.600 --> 05:26.720
Same with RSA.

90
05:26.720 --> 05:30.080
These two are definitely incorrect answers.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

90
05:26.720 --> 05:30.080
These two are definitely incorrect answers.

91
05:30.080 --> 05:36.680
Now IPsec and DTLs are both secure tunnels that we use in the SD WAN

92
05:36.680 --> 05:38.520
environment.

93
05:38.520 --> 05:45.800
However, one of these is data plane and one of these is control plane.

94
05:45.800 --> 05:52.310
And this question is asking specifically about the VBON server, which would be

95
05:52.310 --> 05:54.400
control plane.

96
05:54.400 --> 05:57.200
So what's our control plane protocol?

97
05:57.200 --> 06:00.600
Well, it's actually DTLs.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

97
05:57.200 --> 06:00.600
Well, it's actually DTLs.

98
06:00.600 --> 06:05.400
IPsec is used for our data plane tunnels.

99
06:05.400 --> 06:10.640
So we do use this, but not for the purpose listed in the question.

100
06:10.640 --> 06:14.040
So our correct answer would be DTLs.

101
06:14.040 --> 06:20.020
For our final question from the WAN-edge devices, which of the following

102
06:20.020 --> 06:21.920
devices can be used

103
06:21.920 --> 06:24.760
as WAN-edge devices?

104
06:24.760 --> 06:30.520
First answer here is an ever-growing list of Cisco routers and switches.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

104
06:24.760 --> 06:30.520
First answer here is an ever-growing list of Cisco routers and switches.

105
06:30.520 --> 06:36.510
Well, that sounds fairly accurate, but let's verify the rest of our answers

106
06:36.510 --> 06:36.840
first.

107
06:36.840 --> 06:40.760
Number two, only the V-edge routers.

108
06:40.760 --> 06:41.760
That's not true.

109
06:41.760 --> 06:47.560
Cisco has definitely added additional platforms that can be WAN-edge devices.

110
06:47.560 --> 06:50.200
So that's definitely incorrect.

111
06:50.200 --> 06:52.880
Only the catalyst series switches.

112
06:52.880 --> 06:58.440
Well that's also incorrect because V-edge routers and CSR series routers are

113
06:58.440 --> 06:59.840
all supported.

114
06:59.840 --> 07:04.700
So all of these answers that say only, including answer four here, would be
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

114
06:59.840 --> 07:04.700
So all of these answers that say only, including answer four here, would be

115
07:04.700 --> 07:05.720
incorrect.

116
07:05.720 --> 07:11.640
V-edge routers, catalyst series switches, and CSR series routers are actually

117
07:11.640 --> 07:13.000
all supported.

118
07:13.000 --> 07:16.960
So we can't say only in front of any of those.

119
07:16.960 --> 07:21.670
That would make our first answer an ever-growing list of Cisco routers and

120
07:21.670 --> 07:23.160
switches our best

121
07:23.160 --> 07:26.200
answer for this question.

122
07:26.200 --> 07:28.840
So that concludes this challenge.

123
07:28.840 --> 07:32.940
If you find that you were unable to answer any of these questions, I would
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

123
07:28.840 --> 07:32.940
If you find that you were unable to answer any of these questions, I would

124
07:32.940 --> 07:33.760
encourage you

125
07:33.760 --> 07:39.000
to go back and review the reference section on each question.

126
07:39.000 --> 07:44.160
Otherwise, congratulations on completing introduction to SD WAN.

127
07:44.160 --> 07:48.400
I hope this has been informative for you and I'd like to thank you for viewing.

128
07:48.400 --> 07:56.400
[BLANK_AUDIO]