SDWAN - Installing, Configuring, Monitoring and Troubleshooting Cisco (Viptela)

In this 5-day hands-on up-to-date course on Cisco (Viptela) SD-WAN, students will learn how to administer SD-WAN. Students will learn about deploying and configuring SD-WAN Controllers, vEdge Devices, and Cisco IOS-XE Devices. Students will learn how to manage the vManage Interface, along with the change in the interface in 20.6 and above. Students will learn about Device Template, Feature Template, Configuration Groups and CLI Templates. Student will learn how to tune OMP, BFD, TLOCs, QoS, TCP OPT, DRE, FEC, Packet Duplication. Students will learn how SD-WAN implements Security using SASE, SIG, Umbrella, FW, IPS, AMP, Threat grid, TLS Decryption and Direct Internet Access (DIA). Students will learn about Local and Central Policies. Students will also learn how Cisco SD-WAN allows Enterprises to deploy an effective Cloud Solutions such as Amazon AWS, Microsoft Azure, and Google Cloud, MegaPort, Equinix, and SAAS application such as O365 and Webex. Students will also learn how to Monitor and Troubleshoot the SDWAN Solution.

Use this course towards your Cisco Continuing (CE) Education Credits (40)
Pay by using your Cisco (CLCs) Learning Credits (46) click here: (Map to GK Sales)

Delivery Format:
Date:
Location:
Access Period:
Address:

QTY

Add to Cart Generate a Quote

Class is Full

This session is full. Please select a different session.

View Entire Schedule

SD-WAN Overview
Cisco SD-WAN Hardware
Deploying the Overlay
Configuring vManage
Deploying using Templates
Creating Policies
Monitoring vManage
vAnalytics
Troubleshooting Tools for VManage

Viewing outline for:

Classroom Live Outline

Module 0: Introductions

Module Topics
- General Administration
- WebEX Basics
- Introductions
- Questions Asked by Companies about SD-WAN
- What is SD-WAN?
- SD-WAN Desired Benefits
- How does Cisco define SD-WAN?
Module Summary

Module 1: Cisco SD-WAN (Viptela) Platform Overview

Module Topics
- Lesson 1: Legacy WAN Architecture
  - Common WAN Topologies - Design and Deployment Considerations
  - WAN needs to Support Cloud Apps
  - Cisco’s SD-WAN Functionality Comparison
- Lesson 2: Cisco SD-WAN / Digital Network Architecture Integration
  - Secure Cloud Scale SD-WAN Architecture
  - SD-WAN Security
  - SD-WAN Connectivity
  - SD-WAN Application Services
  - SD-WAN Operations
- Lesson 3: Software Defined Centralized Control
  - SD-WAN - Control Plane vs Data Plane
- Lesson 4: Cisco SD-WAN Solution Overview
- Lesson 5: New SD-WAN Terminology
- Lesson 6: Cisco DNA SD-WAN Licensing
  - Cisco SD-WAN Solution Roles and Responsibilities
  - Cisco SD-WAN Cloud-Delivered Architecture
  - Widely Deployed SD-WAN Capabilities
  - Choose Licensing Type and Level
  - Cisco DNA SD-WAN Licensing
  - Bandwidth Metering
  - Cisco DNA Bandwidth Upgrades
  - Cisco Smart Licensing
  - Cisco Smart Licensing Pooling
  - Managing Smart Licenses
  - What a Smart Account is and what it isn’t
  - Smart Account Structure
  - SDWAN Smart Licensing phase 2 (offline reporting and compliance notification) for SDWAN
Module Summary

Module 2: Deploying Cisco SD-WAN Controllers

Module Topics
- Lesson 1: Cisco SD-WAN Architecture
- Lesson 2: Cisco SD-WAN Controller Deployment Models
  - Controller Deployment Models
  - From Order to Zero-Touch Deployment
  - Controllers Deployment Methodology
  - Cisco SD-WAN Architecture – vManage
  - Cisco SD-WAN Architecture – vSmart
  - Cisco SD-WAN Architecture – vBond
  - Controller Communication Principles
  - Controller Deployment in AWS
  - Cloud Hosted Deployment – Public IP Access to VPN 512
  - Management Traffic for Cloud Deployed Controllers
  - Controllers Public Cloud Deployment
  - Cloud Hosted Deployment – Recommended
  - WAN Edge Control Plane Transport
  - Cloud-Hosted Deployment – Summary
  - On-Prem Deployment Considerations
  - On-Prem Controllers Deployment
  - On-Prem Deployment – vBond / NAT Traversal
  - On-Prem Controller Access
  - On-Prem Deployment
  - Controller Proxy Access
  - Controller Deployment – vManage
- Lesson 3: Cisco SD-WAN Self Service Portal
  - Cisco SD-WAN Self-Service Portal url
  - Configure Cisco SD-WAN Self-Service Portal Components
  - Configure an IdP for the Cisco SD-WAN Self-Service Portal
  - Configure Cisco SD-WAN Self-Service Portal Roles for IdP Users
  - Create a Cisco SD-WAN Cloud-Hosted Overlay Network (1)
- Lesson 4: On-Prem Controller Deployment
  - Controller Installation Overview
  - Controller Virtual Machines Files
- Lesson 5: Create vBond VM Instance on ESXi or KVM
  - Hypervisor Compatibility for vManage, vSmart, and vBond
  - Compatibility Matrix for Cisco SD-WAN Release 20.6.x
  - Compatibility Matrix for Cisco SD-WAN Release 20.4.x
  - SD-WAN Server Sizing
  - vManage Downloads on Cisco.com
  - vManage NMS Server Recommendations 20.6.x
  - Deploy vManage VM Instance on ESXi
  - Deploy vManage VM Instance (1)
  - Change vManage VM Settings - Add Additional Hard Disk
  - Start the vManage Instance and Connect To the vManage Console
  - vManage Console Login
  - vManage – Persona
  - vManage – Add Database Storage
  - Network Interfaces
- Lesson 6: Initial vManage Setup
  - Initial Settings Set at the CLI (1)
  - Configuring vManage Interface Settings
  - Configure General System Parameters – NTP
  - Create a Minimal Configuration for vManage – System
  - Create a Minimal Configuration for vManage – VPN 0
  - Display the Running Configuration: System Section
  - Verify the Ethernet Interfaces
  - Time and NTP
  - Login to vManage Interface
  - View the Dashboard
- Lesson 7: Create vBond VM Instance on ESXi or KVM
  - vBond Downloads Availability
  - Controller Deployment – vBond
  - vBond Controller Server Recommendations
  - Deploy vBond VM Instance on ESXi
  - Deploy vBond VM Instance (1)
  - vBond Console Login
  - Create a Minimal Configuration for vBond – System
  - Create a Minimal Configuration for vBond – VPN 0
  - Display the Running Configuration: System Section
  - Verify the Ethernet Interfaces
  - Time and NTP
- Lesson 8: Create vSmart VM Instance on ESXi or KVM
  - vSmart Downloads Availability
  - vSmart Controller Server Recommendations
  - Deploy vSmart VM Instance on ESXi
  - Deploy vSmart VM Instance (1)
  - Create a Minimal Configuration for vSmart – System
  - Create a Minimal Configuration for vSmart – VPN 0
  - Display the Running Configuration: System Section
  - Verify the Ethernet Interfaces
  - Time and NTP
- Lesson 9: Add Controllers to vManage
  - Integrating Controllers into SD-WAN
  - Set Organization Name in vManage
  - Add the vBond Controllers to vManage
  - Add the vSmart Controllers to vManage
- Lesson 10: Enterprise CA Configuration
  - Generate Certificates for vBond
  - Request a Certificate
  - Download the Certificate
  - Install the Certificate
  - Certificate Installed on Controllers
- Lesson 11: vManage Multitenant Mode
  - Controller Tenancy – Single Tenant
  - vManage Multi-Tenancy in 20.4 / 17.4
  - Migrate Single-Tenant Cisco SD-WAN Overlay to Multitenant
  - Controller Tenancy - Pre 20.4 Software
  - Multi-Tenancy Options
  - RBAC by VPN
  - Multitenant vManage NMS
  - Place the vManage NMS into Multitenant Mode
  - Tenant Menu
  - Add Tenant
- Lesson 12: Upgrade the SD-WAN Environment
  - SD-WAN Upgrade Images – Controllers
  - Cisco vManage Upgrade Paths
  - SD-WAN Upgrade Images – WAN Edges
  - Upgrade Images Merge into Unified for IOS XE in 17.2
  - Best Practices for Software Upgrades
  - Upload Software Images to the Repository
  - Upload Images to vManage
  - Upload Virtual Images for Security on IOS-XE (1)
- Lesson 13: Upgrade vManage
  - Software Upgrade Location and Platform Version
  - vManage OS Update Scheduled (1)
  - Activation of New vManage Images
  - Activation of New Images
  - vManage Activation Complete
  - vBond Upgrades
  - vSmart Upgrades
  - vSmart Activation
  - Upgrading Devices (1)
  - SDWAN Upgrades - Set Default Image
  - SDWAN Upgrade – Delete Old Images
- Lesson 14: Upgrade Devices via CLI
  - SDWAN Upgrade – CLI – Transfer Files
  - SDWAN CLI Upgrade – Install Image
  - SDWAN CLI Upgrade – Activate Image
  - SDWAN CLI Upgrade – Verify Image Activation
  - SDWAN CLI Upgrade – Set Default Image
  - SDWAN CLI Upgrade – Delete Old Image
  - SDWAN IOS-XE Upgrade – CLI
  - SDWAN CLI IOS-XE Upgrade – Install Image
  - SDWAN CLI IOS-XE Upgrade – Activate Image
  - SDWAN CLI IOS-XE Upgrade – Verify Image Activation
  - SDWAN IOS-XE CLI Upgrade – Set Default Image
  - SDWAN IOS-XE CLI Upgrade – Delete Old Image
- Lesson 15: Check Control Plane
  - Check Control Plane – vManage
  - Check Control Plane – vBond
  - Check Control Plane – vSmart
- Lesson 16: Controller High Availability and Scale
  - High Availability and Scale
  - Horizontal Solution Scale - Data Plane
  - Using Affinity to Manage Network Scaling
  - Redundancy – vSmart Control Controllers
  - Redundancy – vManage System
  - vManage Redundancy
  - Cluster Management Status
  - vManage CLI Status Command
  - Cisco vManage Cross-DC High Availability 19.2 and above
  - Understanding the vManage Cluster Messaging Interface
Module Summary

Module 3: Cisco SD-WAN Allow Lists and Certificates

Module Topics
- Lesson 1: Certificates
  - Public Key Infrastructure
  - Types of Certificates
  - Certificate Trust Chain
  - Certificate Authority Options
  - WAN Edge and Controllers Allow Lists
  - Certificate-Based Trust Allow Lists
  - Digitally Signed WAN Edge list – Manual Download
  - Digitally Signed WAN Edge list - Smart Account
  - Control Plane Allow-Listing
  - Controllers Identity
  - Establishing IOS-XE SD-WAN Edge Router Identity
  - Cisco IOS-XE Router Certificates
  - Serial Allow Listing SDWAN WAN Edge Routers
  - Certificate Revocation - 20.7 / 17.7 and Onward
  - Secure Control Channel - WAN Edge Routers
  - Secure Control Channel: WAN Edge
  - Zero Touch Provisioning - vEdge
- Lesson 2: Certificate Configuration
  - Organization Name and vBond Configuration
  - Controller Certificate Authorization - Cisco Automated
  - Controller Certificate Authorization - Symantec Automated
  - Controller Certificate Authorization - Symantec Manual
  - Controller Certificate Authorization- Enterprise Root CA
  - Configure Hardware WAN Edge Certificate Authorization Settings
  - Configure WAN Edge Cloud Certificate Authorization Settings
  - Generate Web Server Certificate – CSR
  - Import Web Server Certificate
  - View Web Server Certificate
  - Enterprise Feature Certificate Authorization
- Lesson 3: Monitoring and Troubleshooting Certificates
  - Monitor Certificates using Dashboard
  - Ensure WAN Edge Certificates are Valid
  - Check Certificate Properties in GUI
  - Check Certificate Properties in CLI
  - Troubleshooting – View Installed Certificate
  - Troubleshooting – View the Root CA Certificate
  - Check Certificate Expiration Date
Module Summary

Module 4: Cisco SD-WAN Platforms

Module Topics
- Lesson 1: Platform Positioning
  - Cisco SD-WAN Routing Portfolio
  - Picking a Device Platform
  - What’s in a Name?
  - IOS Version Images
  - Cisco vEdge Routers
    - vEdge 100
    - vEdge 1000
    - vEdge 2000
    - vEdge 5000
  - Scalability Considerations Data Plane and IPsec
  - vEdge Cloud Virtual Routers
    - Cisco ISR1100-4G
    - Cisco ISR1100-6G
  - SDWAN Throughput across ISR1100 (Viptela OS)
  - XE-SDWAN for ISR1100
  - Cisco ASR 1000 Series Routers: Overview
  - Cisco ASR1000 Series SD-WAN Routers
  - Cisco IOS XE Software Architecture
  - Cisco 4000 Series ISR SDWAN Portfolio
    - Cisco ISR 4461 WAN/SDWAN Router
    - Cisco ISR 4451
    - Cisco ISR 4431
    - Cisco ISR 4351
    - Cisco ISR 4331
    - Cisco ISR 4321
    - Cisco ISR 4221
  - Introducing UADP on ISR4K SDWAN IOS XE 17.4
  - UADP Switch Modules
  - ISR 1100 Features
  - ISR 1100 Portfolio
  - Cisco IR1101 – Compact and flexible
- Lesson 2: Cellular Gateways for SDWAN
  - SD-WAN Connectivity Options
    - *G is Supposed to be WAN Tech, Right?
    - How does 5G improve on 4G?
    - Cellular Gateway Platforms
    - Why Cellular Gateway is needed for High Quality Wireless WAN
    - Deployment Connectivity
    - Cellular Gateways
    - Cellular Gateway Connections
    - Use Case for SDWAN Wireless
  - Last Resort Circuit
  - Cisco Catalyst 8000 Edge Platforms Family
    - Catalyst 8000 Edge Routers
    - Catalyst 8500
    - Catalyst 8500 Third Generation QFP ASIC Innovation
    - Catalyst 8500 for SD-WAN
    - Catalyst 8500 Series Edge Platforms
  - C8500-12X4QC Port Connectivity
    - 100GE, 40GE Connectivity Options (1)
    - High Density 10GE, 1GE Connectivity Options
  - Catalyst 8500L Series Edge Platforms
    - ASR1002-HX vs C8500-12X4QC
    - ASR1001-HX vs C8500-12X
    - ASR1001-X vs C8500L-8S4X
  - Catalyst 8300
    - Cisco Catalyst 8300, 8200 Edge Platforms
    - Cisco Catalyst 8300 Series Edge Platforms
    - ISR 4451 vs C8300-2N2S-xxxx
    - ISR 4431 vs C8300-1N1S-xxxx
    - Catalyst 8300 Supported Modules
- Lesson 3: Catalyst 8200 Series
  - C8200-1N-4T
  - ISR 4331 vs C8200-1N-4T
  - Catalyst 8200 vs ISR4331 Throughput
- Lesson 4: Catalyst 8000v Series Virtual Router
  - Catalyst 8000V continues to build on CSR 1000V
    - Virtual Router Convergence
    - Cisco Catalyst 8000V Edge Software
  - ENCS NVF Platforms
    - ENCS 5400 Series
- Lesson 5: Adding IOS-XE to the Fabric
  - Zero Touch Provisioning – WAN Edge Appliance
  - ZTP – WAN Edge – Static IP Support
  - One Touch Provisioning
    - One Touch Provisioning using Mobile Application
    - One Touch Provisioning Phase-1 – 17.5
    - One Touch Provisioning Phase 2 – 17.6
  - Installing the Mobile App
  - SD-WAN 20.6 - Quick Connect Onboarding
    - Quick Connect Workflow
    - Quick Connect - Getting Started
    - Quick Connect - Pre-requisites
    - Quick Connect - Process Overview
    - Quick Connect - Progress Bar
    - Quick Connect - Sync Device Inventory
    - Quick Connect - Sync Device Inventory – From Smart Account
    - Quick Connect - Sync Device Inventory – Upload Device List
    - Quick Connect - Sync Device Inventory – Skip if Already Done
    - Quick Connect - Select Devices
    - Quick Connect - View Sync Device Inventory Task Details
    - Quick Connect - Return to Workflow
    - Quick Connect - Review Workflow – at any Stage
    - Quick Connect - Add and Review Device Configuration
    - Export, Edit, and Import the Config
    - Quick Connect – Summary
    - Quick Connect - Preview CLI
    - Quick Connect – Deploy
    - Quick Connect - PnP/ZTP
    - Quick Connect - Manual On-boarding
  - IOS-XE SDWAN
  - Cisco SD-WAN Getting Started Guide
  - Cisco Smart Accounts
  - WAN Edge Provisioning
  - Cisco Software Central PNP Portal - software.cisco.com
  - Cisco Plug and Play Portal
  - Plug and Play Connect – Add Controller Profiles
  - Cisco IOS-XE Router Certificates
  - Add Device to the Plug and Play Portal
  - Add Device – Identify Sources
  - Add Device – Identify Device (1)
- Lesson 6: Manually Provision SD-WAN IOS-XE
  - Manually Provision IOS-XE (1)
  - OS Package File
  - Single Image for IOS XE and IOS XE SD-WAN
  - Operational Mode Change
  - Greenfield, Brownfield Image Upgrade Scenarios
  - Install Requirements
  - Provisioning using Bootstrap Config File
- Lesson 7: 17.X IOS-XE PnP Provisioning
  - Single Image: Boot Up Sequence
- Lesson 8: Configuration > Devices
  - Generate Bootstrap for a WAN Edge Cloud Router
  - Generate Bootstrap Configuration for a vEdge Cloud Router
  - Running Device Configuration
  - View a Device's Local Configuration
  - Template Log
  - Delete a WAN Edge Router
  - Decommission a WAN Edge Cloud Router
  - View Status of Device Bring-up
- Lesson 9: High Availability and Redundancy Overview
  - Redundancy - Site with LAN Routing
  - Redundancy - Site with LAN Bridging
  - Redundancy – Hot Standby Router Protocol (HSRP) 20.7 onward
  - Transport Redundancy – Meshed
  - Redundancy – Meshed Transports
  - Redundancy – Extended Transports
  - Transport Redundancy – TLOC Extension
  - TLOC Extension Configuration
Module Summary

Module 5: Cisco SD-WAN Fabric and OMP

Module Topics
- Lesson 1: Why Fabric Architectures?
  - Overlay Management Protocol (OMP) - Unified Control Plane
  - Cisco SD-WAN Terminology – Transport / Service
  - Cisco SD-WAN Terminology – OMP / Site-ID
  - Cisco SD-WAN Terminology – System IP / Organization Name
  - Cisco SD-WAN Terminology
  - End-to-End Segmentation with Multi-Topology
  - Fabric Operation Walk-Through
- Lesson 2: Overlay Management Protocol (OMP)
  - OMP Route Types and Prominent Attributes
  - OMP Routes - Routes learned from a site-local network
- Lesson 3: Transport Locators (TLOCs)
  - TLOC Route
  - TLOC Preference vs Weight
  - OMP Service Route Attributes
  - Significance of Interface (TLOC) Color
  - TLOC Colors
- Lesson 4: Overlay Routing
  - Multi-Domain Routing Fabric
- Lesson 5: OMP Service / Route Timer
  - Graceful Restart for OMP
  - Transport Independent Fabric
  - Unicast Overlay Routing Overview
  - Advertise Local Routes
  - OMP Route Redistribution
  - Administrative Distance
  - NAT Traversal
  - WAN Communication - Traffic Forwarding
- Lesson 6: Operational Commands
  - Operational Commands - vSmart Perspective
  - Operational Commands - WAN Edge Perspective
  - Operational Commands - show omp routes vpn 10 | tab
  - Operational Commands - show ip routes
  - Operational Commands
Module Summary

Module 6: Cisco SD-WAN Security

Module Topics
- Lesson 1: Security Solutions
- Lesson 2: Firewall Ports used in SDWAN
  - DDoS Protection for vEdge Routers
  - DDoS Protection for Controllers
  - Firewall Rules for Controllers
  - Firewall Ports Used in Cisco SDWAN
  - Firewalls Ports – DTLS
  - Firewalls Ports – TLS
  - Ports Used by Cisco SDWAN Devices Running Multiple vCPUs
  - Administrative Ports Used by vManage NMS
  - vManage Cluster Ports
  - Anti-Replay Protection
- Lesson 3: SD-WAN Security and Segmentation
  - Current Challenges in Deploying Segmentation
  - WAN Edge VPNs and Security Zoning
  - VPN Labels
  - Secure Segmentation
  - Segmentation and Multi-Topology
  - Data Plane Privacy and Encryption
  - Data Plane Privacy (Pairwise)
  - Pairwise IPSec Keys for SA
  - Data Plane Integrity
  - Application Filtering
  - Application Filtering with Local Firewall
  - Layered Branch Security with SD-WAN
  - Service Based Traffic Engineering
  - Regional Secure Perimeter – Single Service
  - Regional Secure Perimeter – Multiple Services
  - L4-L7 Regional Secure Perimeter
  - Regional Internet Security
  - DIA Security
  - SD-WAN Integrated Security
  - SD-WAN Unified Security Policy (20.6)
  - Security Custom Options
  - Pre-Create Unified Security Features
  - Unified IPS Policy
  - New Unified Security Policy – Next Generation Firewall
  - NG Firewall Configuration
  - Create an Advanced Inspection Profile to be used with Rule / RuleSets
  - New Unified Firewall Rule with Advanced Inspections Profile
  - Enterprise Firewall
  - How FQDN Works?
  - Use Case: Intra-Zone Policy
  - Use Case: Self-Zone Policy
  - ZBFW: DIA/DCA Security
  - High Speed Logging (HSL)
  - Cloud Delivered Firewall
  - Intrusion Prevention
  - Snort IPS/IDS & Web Filtering Architecture
  - URL Filtering
  - URL-Filtering (URL-F) Database Profiles
  - How often URL-Filtering Database gets Updated?
  - DNS/Web-layer Security
  - DNS/Web-layer Security - Solution Overview
  - Cisco Cloud Security
  - Cloud Security with Zscaler
  - Increased Throughput Capabilities per Router
  - Layer7 Health Check
  - Advanced Malware Protection
  - TLS/SSL Decryption (MiTM Proxy)
- Lesson 4: SD-WAN Security Configuration
  - WAN Edge VPNs and Security Zoning
  - Security Configuration
  - Legacy Security Policy
  - SD-WAN Security Workflow
  - Add Firewall Policy
  - Add Rule to Firewall Policy
  - Add Rule to Deny and Log Traffic
  - Review Inspect and Deny Rules
  - Create Firewall Zones
  - Create Source Firewall Zone
  - Create Destination Firewall Zone
  - Create Firewall Zone Pair
  - Firewall Policy
  - Intrusion Prevention Policy
  - Intrusion Prevention Policy – Add Target VPNs
  - Intrusion Prevention Policy – Configuration
  - Intrusion Prevention Policy – Advanced Configuration
  - Intrusion Prevention Policy – Save IPS Configuration
  - Intrusion Prevention Policy
  - Add URL Filtering Policy
  - URL Filtering Policy – Add Target VPNs
  - URL Filtering Policy - Basic Configuration
  - URL Filtering Policy – Advanced Configuration
  - URL Filtering Policy – Save Configuration
  - URL Filtering Policy
  - Advanced Malware Protection
  - Advanced Malware Protection - Add Target VPNs
  - Advanced Malware Protection – Basic Configuration
  - Advanced Malware Protection – File Analysis Configuration
  - Advanced Malware Protection – Save Configuration
  - Advanced Malware Protection
  - DNS Security Policy
  - Umbrella API Key
  - DNS Security Policy – Add Target VPN
  - DNS Security Policy Basic Configuration
  - DNS Security Policy – Save Configuration
  - DNS Security Policy
  - TLS/SSL Decryption
  - TLS/SSL Decryption Policy Configuration
  - Configure Trusted CA
  - TLS/SSL Decryption Policy Configuration
  - TLS/SSL Decryption Policy Decryption Rule
  - Security Policy - Configuration
  - Security Policy - Preview
  - Edit Template and Apply Security Policy
  - Security Policy – Apply Security Policy to Template
Module Summary

Module 7: SD-WAN QoS

Module Topics
- Lesson 1: Application Visibility and Recognition (NBAR / QoS)
  - What is AppQoE?
  - NBAR Agents
  - Multidimensional Application Quality of Experience
  - Application Visibility and Recognition
  - vEdge Router QoS
  - Device QoS: Queuing
  - WAN Edge Router Traffic Prioritization
  - Device QoS: Shaping
  - Device QoS: Policing
  - Policing with Packet Loss Priority
  - DSCP and COS (802.1p) Re-marking
  - Cisco SD-WAN QOS Features
  - Per-Tunnel QoS support on SD-WAN
  - SD-AVC Service
  - Adaptive QoS on IOS-XE SD-WAN
  - IOS-XE 17.3 - Adaptive QoS
  - Per-VPN QOS Working
  - Monitor Per-Tunnel QoS
- Lesson 2: Bidirectional Forwarding Detection (BFD)
  - Bidirectional Forwarding Detection (BFD)
  - Critical Applications SLA
  - BFD Calculation App-Route Policies
  - Per-Class BFD Probing for AAR
  - Application Aware Timers - Policy Example
  - Troubleshooting BFD Session Issues
- Lesson 3: Forward Error Correction (FEC) / Packet Duplication
- Lesson 4: TCP Optimization
  - Forward Error Correction (FEC)
  - FEC and Multiple Circuits
  - Forward Error Correction (FEC) Modes & Configuration
  - Packet Duplication
  - Packet Duplication and Application Aware Routing
  - TCP Optimization Platforms
  - DRE Optimization (cEdge)
  - DRE Optimization Enhancements
  - TCP Optimization Design Considerations
  - Multiple Service Nodes for AppQoE
  - TCP Optimization on IOS-XE
  - Path MTU Discovery
  - Optimal MTU with Host PMTUD
  - Optimal MTU with TCP MSS Adjust
  - Differentiated Services - Quality of Service
  - Localized Data Policy (QoS) Configuration
  - Forwarding and QoS Example
Module Summary

Module 8: Configuring vManage

Module Topics
- Lesson 1: vManage Dashboard
  - Cisco SDWAN Management
  - Cisco vManage Communication with External Servers via Proxy
  - vManage GUI Menu – Icon vs Expanded
  - vManage GUI Menu – 20.7 and Onward
  - vManage Main Monitor Overview
  - vManage VPN Dashboard
  - vManage Security Dashboard
  - Main Dashboard - Device Pane
  - Reboot Pane
  - Certificates Pane
  - Control Status Pane
  - Site Health View Pane
  - Transport Interface Distribution
  - WAN Edge Inventory Pane
  - WAN Edge Health Pane
  - Transport Health Pane
  - Top Applications
  - Application-Aware Routing Pane
  - Cloud Services – SAAS
  - Cloud Services – Cloud onRamp for IAAS
- Lesson 2: Monitoring
  - Monitor > Geography
  - Monitor > Network (Device)
  - Monitor > Network (Device) DC1-vEdge1 – Applications
  - Monitor > Network (Device) DC1-vEdge1 – Interfaces
  - Monitor > Network (Device) DC1-vEdge1 – WAN > TLOC
  - Monitor > Network (Device) DC1-vEdge1 – WAN > Tunnel
  - Monitor > Network (Device) DC1-vEdge1 – Control Connections
  - Monitor > Network (Device) DC1-vEdge1 – System Status
  - Monitor > Network (Device) DC1-vEdge1 – Events
  - Monitor > Network (Device) DC1-WAN Edge1 – ACL Logs
  - Monitor > Network (Device) DC1-vEdge1 - Troubleshooting
  - Monitor > Network (Device) – Real Time (Show Commands)
  - Monitor > Alarms
  - Monitor > Events
  - Monitor > Audit Log
  - Monitor > ACL Log
- Lesson 3: Tools
  - Tools > SSH Terminal
  - Tools > Rediscover Network
  - Tools > Operation Commands
- Lesson 4: Settings
  - vManage > Administration > Settings
  - Enable Email Notifications
  - Enforce Software Version on WAN Edge Routers
  - Create a Custom Banner
  - Settings > Enable Reverse Proxy
  - Settings > HTTP/HTTPS Proxy Server
  - Settings > Statistics Settings
  - Settings > Cloud Onramp for SaaS
  - Settings > Cloud Services / vAnalytics Platform
  - Settings > vManage Client Session Timeout
  - Settings > vManage Session / Server Session Timeouts
  - Settings > Enable Data Stream Collection
  - Settings > Tenancy Mode
  - Settings > Set Interval to Collect Device Statistic
  - Settings > vManage Maintenance Window
  - Settings > Single Sign-On – Identity Provider Settings
  - Settings > vManage Statistics Database
  - Settings > Google Map API Key
  - Settings > Software Installation Timeout
  - Settings > IPS Signature Update
  - Settings > Smart Account Credentials
- Lesson 5: Resource Groups / Users / Groups
  - Resource Groups / Users / Groups
  - Configuring AAA User Accounts
  - Resource Groups
  - Creating Users in CLI
  - Creating Users via vManage
  - User Account Management
  - Creating Groups
  - Basic Group Privilege
  - Operator Group Privilege
  - Netadmin Group Privilege
  - Add Group and Permissions
  - Which Policies have Granular RBAC (R/W)?
  - Creating User Groups with Policy RBAC – GUI
  - Create Users and Assign to User Groups
  - Edit Group Permissions or Delete Group
  - Configuring RADIUS
  - Configuring RADIUS Authentication
  - Configuring TACACS+ Authentication
  - Configuring the Authentication Order
  - Configuring NAS Attributes
  - Show Users Command
  - Show AAA Usergroup Commands
  - Administration > VPN Groups > Add VPN Group
  - Administration > VPN Segments
  - License Management
  - License Management – Smart Account Management
  - License Management – Smart Account Management Reporting
  - Network Wide Path Insight
Module Summary

Module 9: Creating and Applying SD-WAN Templates

Module Topics
- Lesson 1: Templates
  - Build your Configuration with Templates
  - Device Templates
- Lesson 2: Feature Templates
- Lesson 3: Device Templates
- Lesson 4: System Feature Templates
- Lesson 5: Apply Template to a Device
Module Summary
- Centralized Device Configuration via Templates
- Template Editor
- Template Options
- Create Template
- Centralized Device Configuration via Templates
- Create a Device Template from the CLI
- Template Parameters
- Build a Feature Template
- Feature Templates
- Create Feature Templates for the Device
- Edit Feature Templates
- System Feature Template
- Device Template
- Create VPN 0 Feature Template (1)
- Create VPN Interface Feature Template (1)
- Device Template Management VPN 0 and VPN 512 Configuration
- Logging Feature Template (1)
- OMP Feature Template (1)
- Additional Feature Templates
- Attach Devices to Template (1)
- Schedule Configuration
- Configuration Rollback
- Create a CLI Template

Module 10: Creating and Applying Policies

Module Topics
- Lesson 1: Policy Concepts
  - SD-WAN Policy and Intent Based Networking
  - Cisco SD-WAN Policy Architecture
  - Policy Configuration Overview
  - Policy Framework - Centralized and Localized Policies
  - Cisco SD-WAN Policy Execution
  - Custom Policies
- Lesson 2: Centralized Policies (Control, Data, AppRoute, cFlowd)
  - vManage GUI Centralized Policy Wizard
  - Centralized Policies
  - vSmart Overlay Policy Architecture
  - Centralized Policy Driven WAN Infrastructure
  - Building Blocks of Centralized Policies
  - Construction of SD-WAN Policies
  - Centralized Policy Construction
  - vSmart Policy Construction – Lists
  - vSmart Policy Construction – Policies
  - vSmart Policy Construction – Policy Application
  - vSmart Policy Example
  - Cisco SD-WAN Centralized Policy Architecture
  - Where Centralized Policies are Attached
  - Centralized Control Policy: Inbound vs. Outbound Route Policy
  - vSmart Policy Processing
- Lesson 3: Centralized Control Policies-Multi-Domain Data Plane Case Studies
  - Control Policy Case Study
- Lesson 4: Centralized Control Policy Components
  - Centralized Control Policies
  - Centralized Control Policy
  - Centralized CLI Policy
  - vManage Configuration Procedure
  - OMP Route Match Attributes
  - TLOC Route Match Attributes
- Lesson 5: Traffic Engineering
  - Centralized Control Policy Configuration - Traffic Engineering
  - Traffic Engineering Examples
  - Traffic Engineering Example (3) – Multiple West Sites
  - Creating Arbitrary Topologies
  - Control Policy Examples - Service Chaining
  - Control Policy Service Chaining – Site 4 Service Originator
  - Control Policy Service Chaining – vSmart Policy 1
- Lesson 6: SD-WAN Policy Framework – Use Cases
  - Control Policy Case #1
  - Control Policy Example – Data Center Priority
  - Control Policy Case #2
  - Control Policy Example – Arbitrary VPN Topologies
  - Control Policy Case #3
  - Control Policy Case #4
  - Control Policy Case #5
- Lesson 7: Centralized Policy Framework - App-Route Policies
  - App-Aware Routing Policies
  - Deep Packet Inspection for Identifying Traffic
  - Enable Deep Packet Inspection via Local Policy
  - Application-Aware Routing Policy
  - Application Aware Routing
  - Application Aware Routing Policy Example
  - Application-Aware Routing Policy Configuration
  - App-Route Policies
- Lesson 8: Centralized Data Polices
  - Configuring Centralized Data Policy
  - Data Policy - Applications and Services
  - Data Policy Application
  - Centralized Data Policy Configuration
  - Data Policy NAT
  - Data Policy NAT – vSmart Policy
  - Data Policy Case #1
  - Data Policy Case #2
  - Centralized Data Policy Configuration Procedure
  - Centralized Data Policy Configuration
- Lesson 9: Centralized Data Policies –VPN Membership Policy
  - VPN Membership Policy
  - VPN Membership Policy Examples
- Lesson 10: Centralized Data Polices – cFlowd Policy
  - cFlowd Policy Example
  - cFlowd Flow Data Collection
  - Enable Netflow
  - cFlowd Example
- Lesson 11: Policy Framework – Internet Breakout / DIA
  - Internet Breakout / DIA
  - Internet Breakout Leverage
  - SD-WAN Internet Breakout Options
- Lesson 12: SD-WAN Local Policies
  - Localized Policies
  - Local Control Policy
  - Local CLI Policy
  - Local Control Policy Example
  - WAN Edge Routing Policy Architecture
  - Localized Control Policy Configuration (1)
  - Policy Management
Module Summary

Module 11: SD-WAN Cloud Adoption

Module Topics
- Lesson 1: Cloud Services Adoption
- Lesson 2: Cloud OnRamp – SaaS
  - Microsoft 365 Optimization with Cisco SD-WAN
  - Cloud OnRamp for SaaS Workflow - Site Types
  - Optimize SaaS with Cloud-express Single DIA
  - Cloud onRamp for SaaS – Dual DIA
  - Cloud onRamp for SaaS (Dual ISP)
  - SaaS Cloud OnRamp – DIA and Gateways
  - Cloud onRamp for SaaS (Gateway)
  - Performance Measurement
  - vQoE – Cisco SDWAN Quality of Experience Score
  - Cloud OnRamp for SaaS via SIG
  - Direct Internet Access
  - DNS settings on VPN0
  - NAT Settings on VPN0 Interface
  - Enable Cloud On-Ramp
  - Cloud On-Ramp for SaaS WorkFlow - Adding Applications
  - Cloud On-Ramp for SaaS WorkFlow - Adding DIA Sites
  - Cloud OnRamp for SaaS WorkFlow - Adding Client Sites
  - Cloud On-Ramp for SaaS WorkFlow - Adding Gateway Sites
  - Cloud On-Ramp Dashboard
  - Cloud On-Ramp for SaaS QoE - Application Drill Down (1)
  - Monitor > Network > Realtime > CloudExpress Applications
  - Troubleshooting Cloud On-Ramp on Gateway Exit
  - Troubleshooting OMP metrics
  - Troubleshooting Cloud Express on Local Exit
- Lesson 3: Cloud-Onramp for IAAS / Multicloud
  - SD-WAN Landscape (Mixture of Traditional Networking and Cloud)
  - SD-WAN Evolution
  - Network Evolution at Hyper-Speed
  - SD-WAN Cloud Paths
  - SD-WAN Cloud Networking Integrations
  - Cloud OnRamp for Multicloud
  - Cisco Cloud OnRamp with AWS Transit Gateway Connect
  - Cisco SD-WAN integration with Microsoft vWAN
  - Cisco SD-WAN Cloud Hub with Google Cloud
  - SD-WAN Cloud Interconnect with Megaport and Equinix
  - Cisco SD-WAN Cloud OnRamp for Colocation
  - Cloud onRamp for Colocation and Cloud Interconnect
  - Cisco SD-WAN Cloud OnRamp Facilitates Your Multicloud Journey
  - Cisco SD-WAN Cloud Interconnect
  - Cloud Interconnect?
  - Multicloud: SD-WAN Beyond the Branch
  - SD-WAN Cloud Implementation - Site-to-Cloud
  - SD-WAN Cloud Implementation - Site-to-Site
  - Cloud Connectivity Quick Reference
  - Multi-Cloud Connectivity - Cloud On-Ramp IaaS
  - Public Cloud Connectivity Options
  - Cloud onRamp
  - Cloud onRamp for IaaS - How it works
  - IaaS and SDWAN - Multi-Cloud Deployment
  - Cloud On-Ramp for IaaS – Attached Compute
  - Cloud On-Ramp for IaaS – Gateway VPC/VNET - Fully Automated via vManage
  - Cloud on-Ramp for IaaS: Automated Azure
  - Cloud Deployment
  - Cloud Deployment – Device Template
  - Cloud On-Ramp for Multi-Cloud Dashboard
  - Associate Cloud Account
  - Cloud Global Settings
  - Host Private Networks
  - Host Private Networks / TAG
  - Create Cloud Gateway
  - Attach Host VNets
  - Map VNET to VPN
  - Cloud On-Ramp for IaaS Dashboard – WorkFlow
  - Cloud On-Ramp for IaaS – Dashboard
  - Cloud On-Ramp IaaS – Monitoring
Module Summary

Module 12: vAnalytics Overview

Module Topics
- Lesson 1: vAnalytics Overview
  - vAnalytics Release 2.0: Better Visibility and Control
  - vManage Scalability Considerations
  - When to Consider a 3rd Party Collector
  - vManage vs vAnalytics
  - Why use vAnalytics?
  - vAnalytics Data Flow
  - Metadata Collected by vAnalytics (XML)
  - Customer Onboarding
  - Enable vAnalytics Process
  - Enable vAnalytics in vManage
  - vAnalytics – Customer Data
  - vAnalytics Menus Structure
  - vAnalytics Menu Toolbar Icons
  - vAnalytics Time Range Reporting Increments
  - vAnalytics Metrics
- Lesson 2: vAnalytics Dashboard
  - vAnalytics Summary Dashboard (1)
  - vAnalytics Application Dashboard (1)
  - vAnalytics Popular Application Dashboard (1)
- Lesson 3: vAnalytics Applications
  - Application / Flow Centric
  - Application - Performance and Usage (1)
  - Application Family - Performance and Usage (1)
  - Application Class - Performance and Usage (1)
  - Application Usage and Performance Across Network – Tunnel (1)
  - Application Usage and Performance Across Network - TLOC (1)
  - Application Usage / Performance across Network - Transport Path (1)
  - Application Usage / Performance across Network - Transport Color (1)
- Lesson 4: vAnalytics Network Availability
  - Network Centric Awareness
  - Network - Site Performance and Usage – Site (1)
  - Network - Site Performance and Usage - Edge Device (1)
  - Network - Site Performance and Usage – Carrier (1)
  - Network - Device Inventory (1)
  - Network - TLOC (Circuits) - Performance and Usage
  - Network - Transport Path - Performance and Usage
  - Network - Transport Local Color - Performance and Usage
  - Network - Tunnels - Performance and Usage
- Lesson 5: vAnaylics Flows
  - Flows - Network Flow - Top Flows (Source & Destination)
  - Flows - Network Flow - Top Talkers (1)
  - Flows - Network Flow - Top Destinations (1)
Module Summary

Module 13: Monitoring & Troubleshooting the SD-WAN Solution

Module Topics
- Lesson 1: SD-WAN Support Options
  - Contacting Cisco TAC Support
  - Contact Cisco TAC Severities
  - Cisco TAC Case Tracking
- Lesson 2: Monitoring
  - SD-WAN Monitoring Tools
  - Application Visibility with External Collectors
  - Application Visibility + ART with External Collectors
  - Network Wide Path Insight (NWPI)
- Lesson 3: ThousandEyes
  - Extended visibility with Cisco SD-WAN + ThousandEyes
  - SD-WAN + ThousandEyes Supported Platforms
  - Deployment Options
  - ThousandEyes Probing
- Lesson 4: Compliment with LiveAction
  - LiveAction – End-to-End visibility of app and network
- Lesson 5: SNMP
  - SNMP MIBs Supported on WAN Edges
  - CISCO-SDWAN-OPER-SYSTEM-MIB – Supported Attributes
  - CISCO-SDWAN-APP-ROUTE-MIB – Supported Attributes
  - CISCO-SDWAN-BFD-MIB – Supported Attributes
  - CISCO-SDWAN-POLICY-MIB – Supported Attributes (part 1)
  - CISCO-SDWAN-SECURITY-MIB – supported attributes
- Lesson 6: Controller Failures
  - Recovering from a Failure in the Control Plane
  - Recovering from a vSmart Controller Failure
  - Recovering from a vBond Orchestrator Failure
- Lesson 7: Troubleshooting Controllers
  - Troubleshooting vManage Slowness
  - Template Push failure
  - Template Push failure (Logs)
  - vManage Logs
  - Collecting Admin-Tech
  - Enable Debugs
- Lesson 8: Troubleshooting Devices When They Don’t Join the Fabric
  - View Status of Device Bring-up
  - WAN Edge Requirements for Establishing Control Connections
  - WAN Edge Cannot Join the SD-WAN Overlay (Fabric)
  - Control Connections Failing
  - DTLS Connection Failure
  - TLOC Disabled
  - Transient Conditions
  - Serial Number(s) NOT Present
  - Certificate Revoked/Invalidated
  - Certificate Installation Failed
  - Organization-name Mismatch
  - DTLS Connection Debug
- Lesson 9: Device Configuration and Upgrades Failure
  - Self-Healing - Software Upgrade and Configuration Changes
  - Device Rejects a Template
- Lesson 10: Troubleshooting cEdge
  - Troubleshooting Data Plane on cEdge - BFD
  - Troubleshooting Data Plane on cEdge - EPC
  - Troubleshooting Data Plane on cEdge - Packet-Tracer
  - Troubleshooting Data Plane on cEdge
  - cEdge Password Discovery
  - Factory Default a cEdge
- Lesson 11: Troubleshooting using vManage
  - Check Controller Status
  - Checking Control Connections
  - WAN Edge Health
  - Reboot / Reload Services / Reset Services on Controllers / Devices
  - Reset an Interface
  - Admin Tech
  - Reset Locked Out User on a Device
  - System Alarm
  - System Events
  - System Audit Log
- Lesson 12: Device Troubleshooting
  - Troubleshoot Configuration – Change to CLI Mode
  - Monitor > Network (Device) – {device} - System Status
  - Monitor > Network (Device) – {device} - System Status – Crash
  - Checking Interface Utilization
  - Checking Transport Quality
  - Monitor > Network (Device) – {device} – Control Connections
  - Monitor > Network (Device) – {device} – Events
  - Monitor > Network (Device) – {device} – Troubleshooting
  - Troubleshooting > Ping
  - Troubleshooting > Traceroute
  - Troubleshooting > Speed Test
  - Troubleshooting > Tunnel Health
  - Troubleshooting > Visualizing Application Paths
  - Troubleshooting > Packet Capture
  - Troubleshooting > Simulate Flows
  - Troubleshooting > Debug Logs
- Lesson 13: Using the GUI for cli show command Under Troubleshooting > Real-time
  - Monitor > Network – {Device} - Real Time (Show Commands)
  - Checking BFD connections
  - Troubleshooting Routing
  - Checking OMP Peers Detail
- Lesson 14: CLI Troubleshooting
  - vManage CLI Troubleshooting
  - Time Issues
  - Check vBond Control Connection
  - show orchestrator valid-vEdges
  - show orchestrator valid-vSmart
  - show orchestrator valid-vManage
  - CLI Troubleshooting Commands - show control connections
  - CLI Troubleshooting Commands - show control connections-history
  - clear orchestrator connections-history
  - Log Troubleshooting
  - vBond Look for Specific System IP in Logs
  - vManage Log
  - vManage Rest API Log
  - Display the Last 10 Log Messages
  - View the Root CA Certificate on vBond
  - View the Server Certificate on vBond
  - Using tcpdump to Capture Headers
  - show configuration rollback
  - Validate Command
- Lesson 15: vManage, APIs & Programmability
  - vManage REST APIs
  - REST Web Service
  - Requests and Response REST API Flow
  - Available API Calls
  - Viptela API Library and Documentation
  - REST API
  - URI Structure
  - Options for Working with REST APIs
  - REST API
  - Webhooks
  - Tools – Use the best tool you can afford
Module Summary

Module 0: Introductions

Module Topics
- General Administration
- WebEX Basics
- Introductions
- Questions Asked by Companies about SD-WAN
- What is SD-WAN?
- SD-WAN Desired Benefits
- How does Cisco define SD-WAN?
Module Summary

Module 1: Cisco SD-WAN (Viptela) Platform Overview

Module Topics
- Lesson 1: Legacy WAN Architecture
  - Common WAN Topologies - Design and Deployment Considerations
  - WAN needs to Support Cloud Apps
  - Cisco’s SD-WAN Functionality Comparison
- Lesson 2: Cisco SD-WAN / Digital Network Architecture Integration
  - Secure Cloud Scale SD-WAN Architecture
  - SD-WAN Security
  - SD-WAN Connectivity
  - SD-WAN Application Services
  - SD-WAN Operations
- Lesson 3: Software Defined Centralized Control
  - SD-WAN - Control Plane vs Data Plane
- Lesson 4: Cisco SD-WAN Solution Overview
- Lesson 5: New SD-WAN Terminology
- Lesson 6: Cisco DNA SD-WAN Licensing
  - Cisco SD-WAN Solution Roles and Responsibilities
  - Cisco SD-WAN Cloud-Delivered Architecture
  - Widely Deployed SD-WAN Capabilities
  - Choose Licensing Type and Level
  - Cisco DNA SD-WAN Licensing
  - Bandwidth Metering
  - Cisco DNA Bandwidth Upgrades
  - Cisco Smart Licensing
  - Cisco Smart Licensing Pooling
  - Managing Smart Licenses
  - What a Smart Account is and what it isn’t
  - Smart Account Structure
  - SDWAN Smart Licensing phase 2 (offline reporting and compliance notification) for SDWAN
Module Summary

Module 2: Deploying Cisco SD-WAN Controllers

Module Topics
- Lesson 1: Cisco SD-WAN Architecture
- Lesson 2: Cisco SD-WAN Controller Deployment Models
  - Controller Deployment Models
  - From Order to Zero-Touch Deployment
  - Controllers Deployment Methodology
  - Cisco SD-WAN Architecture – vManage
  - Cisco SD-WAN Architecture – vSmart
  - Cisco SD-WAN Architecture – vBond
  - Controller Communication Principles
  - Controller Deployment in AWS
  - Cloud Hosted Deployment – Public IP Access to VPN 512
  - Management Traffic for Cloud Deployed Controllers
  - Controllers Public Cloud Deployment
  - Cloud Hosted Deployment – Recommended
  - WAN Edge Control Plane Transport
  - Cloud-Hosted Deployment – Summary
  - On-Prem Deployment Considerations
  - On-Prem Controllers Deployment
  - On-Prem Deployment – vBond / NAT Traversal
  - On-Prem Controller Access
  - On-Prem Deployment
  - Controller Proxy Access
  - Controller Deployment – vManage
- Lesson 3: Cisco SD-WAN Self Service Portal
  - Cisco SD-WAN Self-Service Portal url
  - Configure Cisco SD-WAN Self-Service Portal Components
  - Configure an IdP for the Cisco SD-WAN Self-Service Portal
  - Configure Cisco SD-WAN Self-Service Portal Roles for IdP Users
  - Create a Cisco SD-WAN Cloud-Hosted Overlay Network (1)
- Lesson 4: On-Prem Controller Deployment
  - Controller Installation Overview
  - Controller Virtual Machines Files
- Lesson 5: Create vBond VM Instance on ESXi or KVM
  - Hypervisor Compatibility for vManage, vSmart, and vBond
  - Compatibility Matrix for Cisco SD-WAN Release 20.6.x
  - Compatibility Matrix for Cisco SD-WAN Release 20.4.x
  - SD-WAN Server Sizing
  - vManage Downloads on Cisco.com
  - vManage NMS Server Recommendations 20.6.x
  - Deploy vManage VM Instance on ESXi
  - Deploy vManage VM Instance (1)
  - Change vManage VM Settings - Add Additional Hard Disk
  - Start the vManage Instance and Connect To the vManage Console
  - vManage Console Login
  - vManage – Persona
  - vManage – Add Database Storage
  - Network Interfaces
- Lesson 6: Initial vManage Setup
  - Initial Settings Set at the CLI (1)
  - Configuring vManage Interface Settings
  - Configure General System Parameters – NTP
  - Create a Minimal Configuration for vManage – System
  - Create a Minimal Configuration for vManage – VPN 0
  - Display the Running Configuration: System Section
  - Verify the Ethernet Interfaces
  - Time and NTP
  - Login to vManage Interface
  - View the Dashboard
- Lesson 7: Create vBond VM Instance on ESXi or KVM
  - vBond Downloads Availability
  - Controller Deployment – vBond
  - vBond Controller Server Recommendations
  - Deploy vBond VM Instance on ESXi
  - Deploy vBond VM Instance (1)
  - vBond Console Login
  - Create a Minimal Configuration for vBond – System
  - Create a Minimal Configuration for vBond – VPN 0
  - Display the Running Configuration: System Section
  - Verify the Ethernet Interfaces
  - Time and NTP
- Lesson 8: Create vSmart VM Instance on ESXi or KVM
  - vSmart Downloads Availability
  - vSmart Controller Server Recommendations
  - Deploy vSmart VM Instance on ESXi
  - Deploy vSmart VM Instance (1)
  - Create a Minimal Configuration for vSmart – System
  - Create a Minimal Configuration for vSmart – VPN 0
  - Display the Running Configuration: System Section
  - Verify the Ethernet Interfaces
  - Time and NTP
- Lesson 9: Add Controllers to vManage
  - Integrating Controllers into SD-WAN
  - Set Organization Name in vManage
  - Add the vBond Controllers to vManage
  - Add the vSmart Controllers to vManage
- Lesson 10: Enterprise CA Configuration
  - Generate Certificates for vBond
  - Request a Certificate
  - Download the Certificate
  - Install the Certificate
  - Certificate Installed on Controllers
- Lesson 11: vManage Multitenant Mode
  - Controller Tenancy – Single Tenant
  - vManage Multi-Tenancy in 20.4 / 17.4
  - Migrate Single-Tenant Cisco SD-WAN Overlay to Multitenant
  - Controller Tenancy - Pre 20.4 Software
  - Multi-Tenancy Options
  - RBAC by VPN
  - Multitenant vManage NMS
  - Place the vManage NMS into Multitenant Mode
  - Tenant Menu
  - Add Tenant
- Lesson 12: Upgrade the SD-WAN Environment
  - SD-WAN Upgrade Images – Controllers
  - Cisco vManage Upgrade Paths
  - SD-WAN Upgrade Images – WAN Edges
  - Upgrade Images Merge into Unified for IOS XE in 17.2
  - Best Practices for Software Upgrades
  - Upload Software Images to the Repository
  - Upload Images to vManage
  - Upload Virtual Images for Security on IOS-XE (1)
- Lesson 13: Upgrade vManage
  - Software Upgrade Location and Platform Version
  - vManage OS Update Scheduled (1)
  - Activation of New vManage Images
  - Activation of New Images
  - vManage Activation Complete
  - vBond Upgrades
  - vSmart Upgrades
  - vSmart Activation
  - Upgrading Devices (1)
  - SDWAN Upgrades - Set Default Image
  - SDWAN Upgrade – Delete Old Images
- Lesson 14: Upgrade Devices via CLI
  - SDWAN Upgrade – CLI – Transfer Files
  - SDWAN CLI Upgrade – Install Image
  - SDWAN CLI Upgrade – Activate Image
  - SDWAN CLI Upgrade – Verify Image Activation
  - SDWAN CLI Upgrade – Set Default Image
  - SDWAN CLI Upgrade – Delete Old Image
  - SDWAN IOS-XE Upgrade – CLI
  - SDWAN CLI IOS-XE Upgrade – Install Image
  - SDWAN CLI IOS-XE Upgrade – Activate Image
  - SDWAN CLI IOS-XE Upgrade – Verify Image Activation
  - SDWAN IOS-XE CLI Upgrade – Set Default Image
  - SDWAN IOS-XE CLI Upgrade – Delete Old Image
- Lesson 15: Check Control Plane
  - Check Control Plane – vManage
  - Check Control Plane – vBond
  - Check Control Plane – vSmart
- Lesson 16: Controller High Availability and Scale
  - High Availability and Scale
  - Horizontal Solution Scale - Data Plane
  - Using Affinity to Manage Network Scaling
  - Redundancy – vSmart Control Controllers
  - Redundancy – vManage System
  - vManage Redundancy
  - Cluster Management Status
  - vManage CLI Status Command
  - Cisco vManage Cross-DC High Availability 19.2 and above
  - Understanding the vManage Cluster Messaging Interface
Module Summary

Module 3: Cisco SD-WAN Allow Lists and Certificates

Module Topics
- Lesson 1: Certificates
  - Public Key Infrastructure
  - Types of Certificates
  - Certificate Trust Chain
  - Certificate Authority Options
  - WAN Edge and Controllers Allow Lists
  - Certificate-Based Trust Allow Lists
  - Digitally Signed WAN Edge list – Manual Download
  - Digitally Signed WAN Edge list - Smart Account
  - Control Plane Allow-Listing
  - Controllers Identity
  - Establishing IOS-XE SD-WAN Edge Router Identity
  - Cisco IOS-XE Router Certificates
  - Serial Allow Listing SDWAN WAN Edge Routers
  - Certificate Revocation - 20.7 / 17.7 and Onward
  - Secure Control Channel - WAN Edge Routers
  - Secure Control Channel: WAN Edge
  - Zero Touch Provisioning - vEdge
- Lesson 2: Certificate Configuration
  - Organization Name and vBond Configuration
  - Controller Certificate Authorization - Cisco Automated
  - Controller Certificate Authorization - Symantec Automated
  - Controller Certificate Authorization - Symantec Manual
  - Controller Certificate Authorization- Enterprise Root CA
  - Configure Hardware WAN Edge Certificate Authorization Settings
  - Configure WAN Edge Cloud Certificate Authorization Settings
  - Generate Web Server Certificate – CSR
  - Import Web Server Certificate
  - View Web Server Certificate
  - Enterprise Feature Certificate Authorization
- Lesson 3: Monitoring and Troubleshooting Certificates
  - Monitor Certificates using Dashboard
  - Ensure WAN Edge Certificates are Valid
  - Check Certificate Properties in GUI
  - Check Certificate Properties in CLI
  - Troubleshooting – View Installed Certificate
  - Troubleshooting – View the Root CA Certificate
  - Check Certificate Expiration Date
Module Summary

Module 4: Cisco SD-WAN Platforms

Module Topics
- Lesson 1: Platform Positioning
  - Cisco SD-WAN Routing Portfolio
  - Picking a Device Platform
  - What’s in a Name?
  - IOS Version Images
  - Cisco vEdge Routers
    - vEdge 100
    - vEdge 1000
    - vEdge 2000
    - vEdge 5000
  - Scalability Considerations Data Plane and IPsec
  - vEdge Cloud Virtual Routers
    - Cisco ISR1100-4G
    - Cisco ISR1100-6G
  - SDWAN Throughput across ISR1100 (Viptela OS)
  - XE-SDWAN for ISR1100
  - Cisco ASR 1000 Series Routers: Overview
  - Cisco ASR1000 Series SD-WAN Routers
  - Cisco IOS XE Software Architecture
  - Cisco 4000 Series ISR SDWAN Portfolio
    - Cisco ISR 4461 WAN/SDWAN Router
    - Cisco ISR 4451
    - Cisco ISR 4431
    - Cisco ISR 4351
    - Cisco ISR 4331
    - Cisco ISR 4321
    - Cisco ISR 4221
  - Introducing UADP on ISR4K SDWAN IOS XE 17.4
  - UADP Switch Modules
  - ISR 1100 Features
  - ISR 1100 Portfolio
  - Cisco IR1101 – Compact and flexible
- Lesson 2: Cellular Gateways for SDWAN
  - SD-WAN Connectivity Options
    - *G is Supposed to be WAN Tech, Right?
    - How does 5G improve on 4G?
    - Cellular Gateway Platforms
    - Why Cellular Gateway is needed for High Quality Wireless WAN
    - Deployment Connectivity
    - Cellular Gateways
    - Cellular Gateway Connections
    - Use Case for SDWAN Wireless
  - Last Resort Circuit
  - Cisco Catalyst 8000 Edge Platforms Family
    - Catalyst 8000 Edge Routers
    - Catalyst 8500
    - Catalyst 8500 Third Generation QFP ASIC Innovation
    - Catalyst 8500 for SD-WAN
    - Catalyst 8500 Series Edge Platforms
  - C8500-12X4QC Port Connectivity
    - 100GE, 40GE Connectivity Options (1)
    - High Density 10GE, 1GE Connectivity Options
  - Catalyst 8500L Series Edge Platforms
    - ASR1002-HX vs C8500-12X4QC
    - ASR1001-HX vs C8500-12X
    - ASR1001-X vs C8500L-8S4X
  - Catalyst 8300
    - Cisco Catalyst 8300, 8200 Edge Platforms
    - Cisco Catalyst 8300 Series Edge Platforms
    - ISR 4451 vs C8300-2N2S-xxxx
    - ISR 4431 vs C8300-1N1S-xxxx
    - Catalyst 8300 Supported Modules
- Lesson 3: Catalyst 8200 Series
  - C8200-1N-4T
  - ISR 4331 vs C8200-1N-4T
  - Catalyst 8200 vs ISR4331 Throughput
- Lesson 4: Catalyst 8000v Series Virtual Router
  - Catalyst 8000V continues to build on CSR 1000V
    - Virtual Router Convergence
    - Cisco Catalyst 8000V Edge Software
  - ENCS NVF Platforms
    - ENCS 5400 Series
- Lesson 5: Adding IOS-XE to the Fabric
  - Zero Touch Provisioning – WAN Edge Appliance
  - ZTP – WAN Edge – Static IP Support
  - One Touch Provisioning
    - One Touch Provisioning using Mobile Application
    - One Touch Provisioning Phase-1 – 17.5
    - One Touch Provisioning Phase 2 – 17.6
  - Installing the Mobile App
  - SD-WAN 20.6 - Quick Connect Onboarding
    - Quick Connect Workflow
    - Quick Connect - Getting Started
    - Quick Connect - Pre-requisites
    - Quick Connect - Process Overview
    - Quick Connect - Progress Bar
    - Quick Connect - Sync Device Inventory
    - Quick Connect - Sync Device Inventory – From Smart Account
    - Quick Connect - Sync Device Inventory – Upload Device List
    - Quick Connect - Sync Device Inventory – Skip if Already Done
    - Quick Connect - Select Devices
    - Quick Connect - View Sync Device Inventory Task Details
    - Quick Connect - Return to Workflow
    - Quick Connect - Review Workflow – at any Stage
    - Quick Connect - Add and Review Device Configuration
    - Export, Edit, and Import the Config
    - Quick Connect – Summary
    - Quick Connect - Preview CLI
    - Quick Connect – Deploy
    - Quick Connect - PnP/ZTP
    - Quick Connect - Manual On-boarding
  - IOS-XE SDWAN
  - Cisco SD-WAN Getting Started Guide
  - Cisco Smart Accounts
  - WAN Edge Provisioning
  - Cisco Software Central PNP Portal - software.cisco.com
  - Cisco Plug and Play Portal
  - Plug and Play Connect – Add Controller Profiles
  - Cisco IOS-XE Router Certificates
  - Add Device to the Plug and Play Portal
  - Add Device – Identify Sources
  - Add Device – Identify Device (1)
- Lesson 6: Manually Provision SD-WAN IOS-XE
  - Manually Provision IOS-XE (1)
  - OS Package File
  - Single Image for IOS XE and IOS XE SD-WAN
  - Operational Mode Change
  - Greenfield, Brownfield Image Upgrade Scenarios
  - Install Requirements
  - Provisioning using Bootstrap Config File
- Lesson 7: 17.X IOS-XE PnP Provisioning
  - Single Image: Boot Up Sequence
- Lesson 8: Configuration > Devices
  - Generate Bootstrap for a WAN Edge Cloud Router
  - Generate Bootstrap Configuration for a vEdge Cloud Router
  - Running Device Configuration
  - View a Device's Local Configuration
  - Template Log
  - Delete a WAN Edge Router
  - Decommission a WAN Edge Cloud Router
  - View Status of Device Bring-up
- Lesson 9: High Availability and Redundancy Overview
  - Redundancy - Site with LAN Routing
  - Redundancy - Site with LAN Bridging
  - Redundancy – Hot Standby Router Protocol (HSRP) 20.7 onward
  - Transport Redundancy – Meshed
  - Redundancy – Meshed Transports
  - Redundancy – Extended Transports
  - Transport Redundancy – TLOC Extension
  - TLOC Extension Configuration
Module Summary

Module 5: Cisco SD-WAN Fabric and OMP

Module Topics
- Lesson 1: Why Fabric Architectures?
  - Overlay Management Protocol (OMP) - Unified Control Plane
  - Cisco SD-WAN Terminology – Transport / Service
  - Cisco SD-WAN Terminology – OMP / Site-ID
  - Cisco SD-WAN Terminology – System IP / Organization Name
  - Cisco SD-WAN Terminology
  - End-to-End Segmentation with Multi-Topology
  - Fabric Operation Walk-Through
- Lesson 2: Overlay Management Protocol (OMP)
  - OMP Route Types and Prominent Attributes
  - OMP Routes - Routes learned from a site-local network
- Lesson 3: Transport Locators (TLOCs)
  - TLOC Route
  - TLOC Preference vs Weight
  - OMP Service Route Attributes
  - Significance of Interface (TLOC) Color
  - TLOC Colors
- Lesson 4: Overlay Routing
  - Multi-Domain Routing Fabric
- Lesson 5: OMP Service / Route Timer
  - Graceful Restart for OMP
  - Transport Independent Fabric
  - Unicast Overlay Routing Overview
  - Advertise Local Routes
  - OMP Route Redistribution
  - Administrative Distance
  - NAT Traversal
  - WAN Communication - Traffic Forwarding
- Lesson 6: Operational Commands
  - Operational Commands - vSmart Perspective
  - Operational Commands - WAN Edge Perspective
  - Operational Commands - show omp routes vpn 10 | tab
  - Operational Commands - show ip routes
  - Operational Commands
Module Summary

Module 6: Cisco SD-WAN Security

Module Topics
- Lesson 1: Security Solutions
- Lesson 2: Firewall Ports used in SDWAN
  - DDoS Protection for vEdge Routers
  - DDoS Protection for Controllers
  - Firewall Rules for Controllers
  - Firewall Ports Used in Cisco SDWAN
  - Firewalls Ports – DTLS
  - Firewalls Ports – TLS
  - Ports Used by Cisco SDWAN Devices Running Multiple vCPUs
  - Administrative Ports Used by vManage NMS
  - vManage Cluster Ports
  - Anti-Replay Protection
- Lesson 3: SD-WAN Security and Segmentation
  - Current Challenges in Deploying Segmentation
  - WAN Edge VPNs and Security Zoning
  - VPN Labels
  - Secure Segmentation
  - Segmentation and Multi-Topology
  - Data Plane Privacy and Encryption
  - Data Plane Privacy (Pairwise)
  - Pairwise IPSec Keys for SA
  - Data Plane Integrity
  - Application Filtering
  - Application Filtering with Local Firewall
  - Layered Branch Security with SD-WAN
  - Service Based Traffic Engineering
  - Regional Secure Perimeter – Single Service
  - Regional Secure Perimeter – Multiple Services
  - L4-L7 Regional Secure Perimeter
  - Regional Internet Security
  - DIA Security
  - SD-WAN Integrated Security
  - SD-WAN Unified Security Policy (20.6)
  - Security Custom Options
  - Pre-Create Unified Security Features
  - Unified IPS Policy
  - New Unified Security Policy – Next Generation Firewall
  - NG Firewall Configuration
  - Create an Advanced Inspection Profile to be used with Rule / RuleSets
  - New Unified Firewall Rule with Advanced Inspections Profile
  - Enterprise Firewall
  - How FQDN Works?
  - Use Case: Intra-Zone Policy
  - Use Case: Self-Zone Policy
  - ZBFW: DIA/DCA Security
  - High Speed Logging (HSL)
  - Cloud Delivered Firewall
  - Intrusion Prevention
  - Snort IPS/IDS & Web Filtering Architecture
  - URL Filtering
  - URL-Filtering (URL-F) Database Profiles
  - How often URL-Filtering Database gets Updated?
  - DNS/Web-layer Security
  - DNS/Web-layer Security - Solution Overview
  - Cisco Cloud Security
  - Cloud Security with Zscaler
  - Increased Throughput Capabilities per Router
  - Layer7 Health Check
  - Advanced Malware Protection
  - TLS/SSL Decryption (MiTM Proxy)
- Lesson 4: SD-WAN Security Configuration
  - WAN Edge VPNs and Security Zoning
  - Security Configuration
  - Legacy Security Policy
  - SD-WAN Security Workflow
  - Add Firewall Policy
  - Add Rule to Firewall Policy
  - Add Rule to Deny and Log Traffic
  - Review Inspect and Deny Rules
  - Create Firewall Zones
  - Create Source Firewall Zone
  - Create Destination Firewall Zone
  - Create Firewall Zone Pair
  - Firewall Policy
  - Intrusion Prevention Policy
  - Intrusion Prevention Policy – Add Target VPNs
  - Intrusion Prevention Policy – Configuration
  - Intrusion Prevention Policy – Advanced Configuration
  - Intrusion Prevention Policy – Save IPS Configuration
  - Intrusion Prevention Policy
  - Add URL Filtering Policy
  - URL Filtering Policy – Add Target VPNs
  - URL Filtering Policy - Basic Configuration
  - URL Filtering Policy – Advanced Configuration
  - URL Filtering Policy – Save Configuration
  - URL Filtering Policy
  - Advanced Malware Protection
  - Advanced Malware Protection - Add Target VPNs
  - Advanced Malware Protection – Basic Configuration
  - Advanced Malware Protection – File Analysis Configuration
  - Advanced Malware Protection – Save Configuration
  - Advanced Malware Protection
  - DNS Security Policy
  - Umbrella API Key
  - DNS Security Policy – Add Target VPN
  - DNS Security Policy Basic Configuration
  - DNS Security Policy – Save Configuration
  - DNS Security Policy
  - TLS/SSL Decryption
  - TLS/SSL Decryption Policy Configuration
  - Configure Trusted CA
  - TLS/SSL Decryption Policy Configuration
  - TLS/SSL Decryption Policy Decryption Rule
  - Security Policy - Configuration
  - Security Policy - Preview
  - Edit Template and Apply Security Policy
  - Security Policy – Apply Security Policy to Template
Module Summary

Module 7: SD-WAN QoS

Module Topics
- Lesson 1: Application Visibility and Recognition (NBAR / QoS)
  - What is AppQoE?
  - NBAR Agents
  - Multidimensional Application Quality of Experience
  - Application Visibility and Recognition
  - vEdge Router QoS
  - Device QoS: Queuing
  - WAN Edge Router Traffic Prioritization
  - Device QoS: Shaping
  - Device QoS: Policing
  - Policing with Packet Loss Priority
  - DSCP and COS (802.1p) Re-marking
  - Cisco SD-WAN QOS Features
  - Per-Tunnel QoS support on SD-WAN
  - SD-AVC Service
  - Adaptive QoS on IOS-XE SD-WAN
  - IOS-XE 17.3 - Adaptive QoS
  - Per-VPN QOS Working
  - Monitor Per-Tunnel QoS
- Lesson 2: Bidirectional Forwarding Detection (BFD)
  - Bidirectional Forwarding Detection (BFD)
  - Critical Applications SLA
  - BFD Calculation App-Route Policies
  - Per-Class BFD Probing for AAR
  - Application Aware Timers - Policy Example
  - Troubleshooting BFD Session Issues
- Lesson 3: Forward Error Correction (FEC) / Packet Duplication
- Lesson 4: TCP Optimization
  - Forward Error Correction (FEC)
  - FEC and Multiple Circuits
  - Forward Error Correction (FEC) Modes & Configuration
  - Packet Duplication
  - Packet Duplication and Application Aware Routing
  - TCP Optimization Platforms
  - DRE Optimization (cEdge)
  - DRE Optimization Enhancements
  - TCP Optimization Design Considerations
  - Multiple Service Nodes for AppQoE
  - TCP Optimization on IOS-XE
  - Path MTU Discovery
  - Optimal MTU with Host PMTUD
  - Optimal MTU with TCP MSS Adjust
  - Differentiated Services - Quality of Service
  - Localized Data Policy (QoS) Configuration
  - Forwarding and QoS Example
Module Summary

Module 8: Configuring vManage

Module Topics
- Lesson 1: vManage Dashboard
  - Cisco SDWAN Management
  - Cisco vManage Communication with External Servers via Proxy
  - vManage GUI Menu – Icon vs Expanded
  - vManage GUI Menu – 20.7 and Onward
  - vManage Main Monitor Overview
  - vManage VPN Dashboard
  - vManage Security Dashboard
  - Main Dashboard - Device Pane
  - Reboot Pane
  - Certificates Pane
  - Control Status Pane
  - Site Health View Pane
  - Transport Interface Distribution
  - WAN Edge Inventory Pane
  - WAN Edge Health Pane
  - Transport Health Pane
  - Top Applications
  - Application-Aware Routing Pane
  - Cloud Services – SAAS
  - Cloud Services – Cloud onRamp for IAAS
- Lesson 2: Monitoring
  - Monitor > Geography
  - Monitor > Network (Device)
  - Monitor > Network (Device) DC1-vEdge1 – Applications
  - Monitor > Network (Device) DC1-vEdge1 – Interfaces
  - Monitor > Network (Device) DC1-vEdge1 – WAN > TLOC
  - Monitor > Network (Device) DC1-vEdge1 – WAN > Tunnel
  - Monitor > Network (Device) DC1-vEdge1 – Control Connections
  - Monitor > Network (Device) DC1-vEdge1 – System Status
  - Monitor > Network (Device) DC1-vEdge1 – Events
  - Monitor > Network (Device) DC1-WAN Edge1 – ACL Logs
  - Monitor > Network (Device) DC1-vEdge1 - Troubleshooting
  - Monitor > Network (Device) – Real Time (Show Commands)
  - Monitor > Alarms
  - Monitor > Events
  - Monitor > Audit Log
  - Monitor > ACL Log
- Lesson 3: Tools
  - Tools > SSH Terminal
  - Tools > Rediscover Network
  - Tools > Operation Commands
- Lesson 4: Settings
  - vManage > Administration > Settings
  - Enable Email Notifications
  - Enforce Software Version on WAN Edge Routers
  - Create a Custom Banner
  - Settings > Enable Reverse Proxy
  - Settings > HTTP/HTTPS Proxy Server
  - Settings > Statistics Settings
  - Settings > Cloud Onramp for SaaS
  - Settings > Cloud Services / vAnalytics Platform
  - Settings > vManage Client Session Timeout
  - Settings > vManage Session / Server Session Timeouts
  - Settings > Enable Data Stream Collection
  - Settings > Tenancy Mode
  - Settings > Set Interval to Collect Device Statistic
  - Settings > vManage Maintenance Window
  - Settings > Single Sign-On – Identity Provider Settings
  - Settings > vManage Statistics Database
  - Settings > Google Map API Key
  - Settings > Software Installation Timeout
  - Settings > IPS Signature Update
  - Settings > Smart Account Credentials
- Lesson 5: Resource Groups / Users / Groups
  - Resource Groups / Users / Groups
  - Configuring AAA User Accounts
  - Resource Groups
  - Creating Users in CLI
  - Creating Users via vManage
  - User Account Management
  - Creating Groups
  - Basic Group Privilege
  - Operator Group Privilege
  - Netadmin Group Privilege
  - Add Group and Permissions
  - Which Policies have Granular RBAC (R/W)?
  - Creating User Groups with Policy RBAC – GUI
  - Create Users and Assign to User Groups
  - Edit Group Permissions or Delete Group
  - Configuring RADIUS
  - Configuring RADIUS Authentication
  - Configuring TACACS+ Authentication
  - Configuring the Authentication Order
  - Configuring NAS Attributes
  - Show Users Command
  - Show AAA Usergroup Commands
  - Administration > VPN Groups > Add VPN Group
  - Administration > VPN Segments
  - License Management
  - License Management – Smart Account Management
  - License Management – Smart Account Management Reporting
  - Network Wide Path Insight
Module Summary

Module 9: Creating and Applying SD-WAN Templates

Module Topics
- Lesson 1: Templates
  - Build your Configuration with Templates
  - Device Templates
- Lesson 2: Feature Templates
- Lesson 3: Device Templates
- Lesson 4: System Feature Templates
- Lesson 5: Apply Template to a Device
Module Summary
- Centralized Device Configuration via Templates
- Template Editor
- Template Options
- Create Template
- Centralized Device Configuration via Templates
- Create a Device Template from the CLI
- Template Parameters
- Build a Feature Template
- Feature Templates
- Create Feature Templates for the Device
- Edit Feature Templates
- System Feature Template
- Device Template
- Create VPN 0 Feature Template (1)
- Create VPN Interface Feature Template (1)
- Device Template Management VPN 0 and VPN 512 Configuration
- Logging Feature Template (1)
- OMP Feature Template (1)
- Additional Feature Templates
- Attach Devices to Template (1)
- Schedule Configuration
- Configuration Rollback
- Create a CLI Template

Module 10: Creating and Applying Policies

Module Topics
- Lesson 1: Policy Concepts
  - SD-WAN Policy and Intent Based Networking
  - Cisco SD-WAN Policy Architecture
  - Policy Configuration Overview
  - Policy Framework - Centralized and Localized Policies
  - Cisco SD-WAN Policy Execution
  - Custom Policies
- Lesson 2: Centralized Policies (Control, Data, AppRoute, cFlowd)
  - vManage GUI Centralized Policy Wizard
  - Centralized Policies
  - vSmart Overlay Policy Architecture
  - Centralized Policy Driven WAN Infrastructure
  - Building Blocks of Centralized Policies
  - Construction of SD-WAN Policies
  - Centralized Policy Construction
  - vSmart Policy Construction – Lists
  - vSmart Policy Construction – Policies
  - vSmart Policy Construction – Policy Application
  - vSmart Policy Example
  - Cisco SD-WAN Centralized Policy Architecture
  - Where Centralized Policies are Attached
  - Centralized Control Policy: Inbound vs. Outbound Route Policy
  - vSmart Policy Processing
- Lesson 3: Centralized Control Policies-Multi-Domain Data Plane Case Studies
  - Control Policy Case Study
- Lesson 4: Centralized Control Policy Components
  - Centralized Control Policies
  - Centralized Control Policy
  - Centralized CLI Policy
  - vManage Configuration Procedure
  - OMP Route Match Attributes
  - TLOC Route Match Attributes
- Lesson 5: Traffic Engineering
  - Centralized Control Policy Configuration - Traffic Engineering
  - Traffic Engineering Examples
  - Traffic Engineering Example (3) – Multiple West Sites
  - Creating Arbitrary Topologies
  - Control Policy Examples - Service Chaining
  - Control Policy Service Chaining – Site 4 Service Originator
  - Control Policy Service Chaining – vSmart Policy 1
- Lesson 6: SD-WAN Policy Framework – Use Cases
  - Control Policy Case #1
  - Control Policy Example – Data Center Priority
  - Control Policy Case #2
  - Control Policy Example – Arbitrary VPN Topologies
  - Control Policy Case #3
  - Control Policy Case #4
  - Control Policy Case #5
- Lesson 7: Centralized Policy Framework - App-Route Policies
  - App-Aware Routing Policies
  - Deep Packet Inspection for Identifying Traffic
  - Enable Deep Packet Inspection via Local Policy
  - Application-Aware Routing Policy
  - Application Aware Routing
  - Application Aware Routing Policy Example
  - Application-Aware Routing Policy Configuration
  - App-Route Policies
- Lesson 8: Centralized Data Polices
  - Configuring Centralized Data Policy
  - Data Policy - Applications and Services
  - Data Policy Application
  - Centralized Data Policy Configuration
  - Data Policy NAT
  - Data Policy NAT – vSmart Policy
  - Data Policy Case #1
  - Data Policy Case #2
  - Centralized Data Policy Configuration Procedure
  - Centralized Data Policy Configuration
- Lesson 9: Centralized Data Policies –VPN Membership Policy
  - VPN Membership Policy
  - VPN Membership Policy Examples
- Lesson 10: Centralized Data Polices – cFlowd Policy
  - cFlowd Policy Example
  - cFlowd Flow Data Collection
  - Enable Netflow
  - cFlowd Example
- Lesson 11: Policy Framework – Internet Breakout / DIA
  - Internet Breakout / DIA
  - Internet Breakout Leverage
  - SD-WAN Internet Breakout Options
- Lesson 12: SD-WAN Local Policies
  - Localized Policies
  - Local Control Policy
  - Local CLI Policy
  - Local Control Policy Example
  - WAN Edge Routing Policy Architecture
  - Localized Control Policy Configuration (1)
  - Policy Management
Module Summary

Module 11: SD-WAN Cloud Adoption

Module Topics
- Lesson 1: Cloud Services Adoption
- Lesson 2: Cloud OnRamp – SaaS
  - Microsoft 365 Optimization with Cisco SD-WAN
  - Cloud OnRamp for SaaS Workflow - Site Types
  - Optimize SaaS with Cloud-express Single DIA
  - Cloud onRamp for SaaS – Dual DIA
  - Cloud onRamp for SaaS (Dual ISP)
  - SaaS Cloud OnRamp – DIA and Gateways
  - Cloud onRamp for SaaS (Gateway)
  - Performance Measurement
  - vQoE – Cisco SDWAN Quality of Experience Score
  - Cloud OnRamp for SaaS via SIG
  - Direct Internet Access
  - DNS settings on VPN0
  - NAT Settings on VPN0 Interface
  - Enable Cloud On-Ramp
  - Cloud On-Ramp for SaaS WorkFlow - Adding Applications
  - Cloud On-Ramp for SaaS WorkFlow - Adding DIA Sites
  - Cloud OnRamp for SaaS WorkFlow - Adding Client Sites
  - Cloud On-Ramp for SaaS WorkFlow - Adding Gateway Sites
  - Cloud On-Ramp Dashboard
  - Cloud On-Ramp for SaaS QoE - Application Drill Down (1)
  - Monitor > Network > Realtime > CloudExpress Applications
  - Troubleshooting Cloud On-Ramp on Gateway Exit
  - Troubleshooting OMP metrics
  - Troubleshooting Cloud Express on Local Exit
- Lesson 3: Cloud-Onramp for IAAS / Multicloud
  - SD-WAN Landscape (Mixture of Traditional Networking and Cloud)
  - SD-WAN Evolution
  - Network Evolution at Hyper-Speed
  - SD-WAN Cloud Paths
  - SD-WAN Cloud Networking Integrations
  - Cloud OnRamp for Multicloud
  - Cisco Cloud OnRamp with AWS Transit Gateway Connect
  - Cisco SD-WAN integration with Microsoft vWAN
  - Cisco SD-WAN Cloud Hub with Google Cloud
  - SD-WAN Cloud Interconnect with Megaport and Equinix
  - Cisco SD-WAN Cloud OnRamp for Colocation
  - Cloud onRamp for Colocation and Cloud Interconnect
  - Cisco SD-WAN Cloud OnRamp Facilitates Your Multicloud Journey
  - Cisco SD-WAN Cloud Interconnect
  - Cloud Interconnect?
  - Multicloud: SD-WAN Beyond the Branch
  - SD-WAN Cloud Implementation - Site-to-Cloud
  - SD-WAN Cloud Implementation - Site-to-Site
  - Cloud Connectivity Quick Reference
  - Multi-Cloud Connectivity - Cloud On-Ramp IaaS
  - Public Cloud Connectivity Options
  - Cloud onRamp
  - Cloud onRamp for IaaS - How it works
  - IaaS and SDWAN - Multi-Cloud Deployment
  - Cloud On-Ramp for IaaS – Attached Compute
  - Cloud On-Ramp for IaaS – Gateway VPC/VNET - Fully Automated via vManage
  - Cloud on-Ramp for IaaS: Automated Azure
  - Cloud Deployment
  - Cloud Deployment – Device Template
  - Cloud On-Ramp for Multi-Cloud Dashboard
  - Associate Cloud Account
  - Cloud Global Settings
  - Host Private Networks
  - Host Private Networks / TAG
  - Create Cloud Gateway
  - Attach Host VNets
  - Map VNET to VPN
  - Cloud On-Ramp for IaaS Dashboard – WorkFlow
  - Cloud On-Ramp for IaaS – Dashboard
  - Cloud On-Ramp IaaS – Monitoring
Module Summary

Module 12: vAnalytics Overview

Module Topics
- Lesson 1: vAnalytics Overview
  - vAnalytics Release 2.0: Better Visibility and Control
  - vManage Scalability Considerations
  - When to Consider a 3rd Party Collector
  - vManage vs vAnalytics
  - Why use vAnalytics?
  - vAnalytics Data Flow
  - Metadata Collected by vAnalytics (XML)
  - Customer Onboarding
  - Enable vAnalytics Process
  - Enable vAnalytics in vManage
  - vAnalytics – Customer Data
  - vAnalytics Menus Structure
  - vAnalytics Menu Toolbar Icons
  - vAnalytics Time Range Reporting Increments
  - vAnalytics Metrics
- Lesson 2: vAnalytics Dashboard
  - vAnalytics Summary Dashboard (1)
  - vAnalytics Application Dashboard (1)
  - vAnalytics Popular Application Dashboard (1)
- Lesson 3: vAnalytics Applications
  - Application / Flow Centric
  - Application - Performance and Usage (1)
  - Application Family - Performance and Usage (1)
  - Application Class - Performance and Usage (1)
  - Application Usage and Performance Across Network – Tunnel (1)
  - Application Usage and Performance Across Network - TLOC (1)
  - Application Usage / Performance across Network - Transport Path (1)
  - Application Usage / Performance across Network - Transport Color (1)
- Lesson 4: vAnalytics Network Availability
  - Network Centric Awareness
  - Network - Site Performance and Usage – Site (1)
  - Network - Site Performance and Usage - Edge Device (1)
  - Network - Site Performance and Usage – Carrier (1)
  - Network - Device Inventory (1)
  - Network - TLOC (Circuits) - Performance and Usage
  - Network - Transport Path - Performance and Usage
  - Network - Transport Local Color - Performance and Usage
  - Network - Tunnels - Performance and Usage
- Lesson 5: vAnaylics Flows
  - Flows - Network Flow - Top Flows (Source & Destination)
  - Flows - Network Flow - Top Talkers (1)
  - Flows - Network Flow - Top Destinations (1)
Module Summary

Module 13: Monitoring & Troubleshooting the SD-WAN Solution

Module Topics
- Lesson 1: SD-WAN Support Options
  - Contacting Cisco TAC Support
  - Contact Cisco TAC Severities
  - Cisco TAC Case Tracking
- Lesson 2: Monitoring
  - SD-WAN Monitoring Tools
  - Application Visibility with External Collectors
  - Application Visibility + ART with External Collectors
  - Network Wide Path Insight (NWPI)
- Lesson 3: ThousandEyes
  - Extended visibility with Cisco SD-WAN + ThousandEyes
  - SD-WAN + ThousandEyes Supported Platforms
  - Deployment Options
  - ThousandEyes Probing
- Lesson 4: Compliment with LiveAction
  - LiveAction – End-to-End visibility of app and network
- Lesson 5: SNMP
  - SNMP MIBs Supported on WAN Edges
  - CISCO-SDWAN-OPER-SYSTEM-MIB – Supported Attributes
  - CISCO-SDWAN-APP-ROUTE-MIB – Supported Attributes
  - CISCO-SDWAN-BFD-MIB – Supported Attributes
  - CISCO-SDWAN-POLICY-MIB – Supported Attributes (part 1)
  - CISCO-SDWAN-SECURITY-MIB – supported attributes
- Lesson 6: Controller Failures
  - Recovering from a Failure in the Control Plane
  - Recovering from a vSmart Controller Failure
  - Recovering from a vBond Orchestrator Failure
- Lesson 7: Troubleshooting Controllers
  - Troubleshooting vManage Slowness
  - Template Push failure
  - Template Push failure (Logs)
  - vManage Logs
  - Collecting Admin-Tech
  - Enable Debugs
- Lesson 8: Troubleshooting Devices When They Don’t Join the Fabric
  - View Status of Device Bring-up
  - WAN Edge Requirements for Establishing Control Connections
  - WAN Edge Cannot Join the SD-WAN Overlay (Fabric)
  - Control Connections Failing
  - DTLS Connection Failure
  - TLOC Disabled
  - Transient Conditions
  - Serial Number(s) NOT Present
  - Certificate Revoked/Invalidated
  - Certificate Installation Failed
  - Organization-name Mismatch
  - DTLS Connection Debug
- Lesson 9: Device Configuration and Upgrades Failure
  - Self-Healing - Software Upgrade and Configuration Changes
  - Device Rejects a Template
- Lesson 10: Troubleshooting cEdge
  - Troubleshooting Data Plane on cEdge - BFD
  - Troubleshooting Data Plane on cEdge - EPC
  - Troubleshooting Data Plane on cEdge - Packet-Tracer
  - Troubleshooting Data Plane on cEdge
  - cEdge Password Discovery
  - Factory Default a cEdge
- Lesson 11: Troubleshooting using vManage
  - Check Controller Status
  - Checking Control Connections
  - WAN Edge Health
  - Reboot / Reload Services / Reset Services on Controllers / Devices
  - Reset an Interface
  - Admin Tech
  - Reset Locked Out User on a Device
  - System Alarm
  - System Events
  - System Audit Log
- Lesson 12: Device Troubleshooting
  - Troubleshoot Configuration – Change to CLI Mode
  - Monitor > Network (Device) – {device} - System Status
  - Monitor > Network (Device) – {device} - System Status – Crash
  - Checking Interface Utilization
  - Checking Transport Quality
  - Monitor > Network (Device) – {device} – Control Connections
  - Monitor > Network (Device) – {device} – Events
  - Monitor > Network (Device) – {device} – Troubleshooting
  - Troubleshooting > Ping
  - Troubleshooting > Traceroute
  - Troubleshooting > Speed Test
  - Troubleshooting > Tunnel Health
  - Troubleshooting > Visualizing Application Paths
  - Troubleshooting > Packet Capture
  - Troubleshooting > Simulate Flows
  - Troubleshooting > Debug Logs
- Lesson 13: Using the GUI for cli show command Under Troubleshooting > Real-time
  - Monitor > Network – {Device} - Real Time (Show Commands)
  - Checking BFD connections
  - Troubleshooting Routing
  - Checking OMP Peers Detail
- Lesson 14: CLI Troubleshooting
  - vManage CLI Troubleshooting
  - Time Issues
  - Check vBond Control Connection
  - show orchestrator valid-vEdges
  - show orchestrator valid-vSmart
  - show orchestrator valid-vManage
  - CLI Troubleshooting Commands - show control connections
  - CLI Troubleshooting Commands - show control connections-history
  - clear orchestrator connections-history
  - Log Troubleshooting
  - vBond Look for Specific System IP in Logs
  - vManage Log
  - vManage Rest API Log
  - Display the Last 10 Log Messages
  - View the Root CA Certificate on vBond
  - View the Server Certificate on vBond
  - Using tcpdump to Capture Headers
  - show configuration rollback
  - Validate Command
- Lesson 15: vManage, APIs & Programmability
  - vManage REST APIs
  - REST Web Service
  - Requests and Response REST API Flow
  - Available API Calls
  - Viptela API Library and Documentation
  - REST API
  - URI Structure
  - Options for Working with REST APIs
  - REST API
  - Webhooks
  - Tools – Use the best tool you can afford
Module Summary

Viewing labs for:

Classroom Live Labs

Lab 1: Review & Troubleshoot Initials SDWAN Environment

Review Environment
Troubleshooting Initial Connectivity
Troubleshooting Initial Control Connections

Lab 2: Create and Troubleshoot SDWAN Clusters

Create a 3 Node SDWAN Cluster
Monitor Cluster Troubleshoot Cluster

Lab 3: Template / Configurations Groups

Advanced Techniques for Template Creation
Variable Naming Conventions for Reusability
Create Feature Template for reuse across all vEdge devices
Export and Import Templates via API
Troubleshoot Template Deployment

Lab 4: Deploy and Troubleshoot Hardware Routers with ztp

Troubleshoot and Deploy 4331 Router
Troubleshoot and Deploy vEdge Router

Lab 5: Implement Routing Protocol

Configure Transparent Routing
Configure BGP Template and Local Policy on the Transport VPN
Configure OSPF Template and Local Policy on the Transport VPN
Configure BGP Template and Local Policy on the Service Side (LAN) VPN
Configure OSPF Template and Local Policy on the Service Side (LAN) VPN
Configure EIGRP Template and Local Policy on the Service Side (LAN) VPN
Configure Multicast on vEdge
Configure Multicast on IOS-XE
Monitor Routing
Troubleshooting Routing Protocols

Lab 6: Advanced Firewall Policy Design

Setup and deploy a realistic firewall Configuration on vEdge and IOS-XE
Setup IPS/URL Filtering on IOS-XE Device
Setup Web Layer Security
Monitoring Security Policy
Test and Troubleshoot a Firewall Policy

Lab 7: Designing and Implementing Local Policies and QoS Policies

Design and Implement Lists to Support Local Policies
Design Access List
Advanced QoS Design on Interfaces / Sub Interfaces
Creating Shapers and Policers
Rewriting QoS for External MPLS Circuit
Remarking for Cisco Enterprise QoS Model
Setup Port Mirroring for traffic analysis

Lab 8: Create Advanced Central Policies

Advanced List Design Techniques
Advanced Site Design
Design and Troubleshoot a Hub and Spoke Topology
Design, Configure, and Troubleshoot a Full Mesh Topology
Design, Configure, and Troubleshoot a Hub and Spoke Topology with a Full Mesh Core
Design, Configure, and Troubleshoot Custom Control Policies with Traffic Engineering
Design, Configure, and Troubleshoot a Service Chain with an ASA Firewall
Design, Configure, and Troubleshoot a QoS Policy at the VPN Level
Design, Configure, and Troubleshoot Extranet with a 3rd Party Provider
Design, Configure, and Troubleshoot Application Aware Routing Policy

Lab 9: Monitoring the Environment

Monitoring using vManage
Monitoring using the CLI
Monitoring using vAnalytics

Lab 10: Troubleshooting

Troubleshooting Hardware Issues
Troubleshooting Control Connections
Troubleshooting Certificate Issues
Troubleshooting Controllers
Troubleshooting BFD Sessions
Troubleshooting Templates
Troubleshooting Local Policies
Troubleshooting Central Policies

Lab 1: Review & Troubleshoot Initials SDWAN Environment

Review Environment
Troubleshooting Initial Connectivity
Troubleshooting Initial Control Connections

Lab 2: Create and Troubleshoot SDWAN Clusters

Create a 3 Node SDWAN Cluster
Monitor Cluster Troubleshoot Cluster

Lab 3: Template / Configurations Groups

Advanced Techniques for Template Creation
Variable Naming Conventions for Reusability
Create Feature Template for reuse across all vEdge devices
Export and Import Templates via API
Troubleshoot Template Deployment

Lab 4: Deploy and Troubleshoot Hardware Routers with ztp

Troubleshoot and Deploy 4331 Router
Troubleshoot and Deploy vEdge Router

Lab 5: Implement Routing Protocol

Configure Transparent Routing
Configure BGP Template and Local Policy on the Transport VPN
Configure OSPF Template and Local Policy on the Transport VPN
Configure BGP Template and Local Policy on the Service Side (LAN) VPN
Configure OSPF Template and Local Policy on the Service Side (LAN) VPN
Configure EIGRP Template and Local Policy on the Service Side (LAN) VPN
Configure Multicast on vEdge
Configure Multicast on IOS-XE
Monitor Routing
Troubleshooting Routing Protocols

Lab 6: Advanced Firewall Policy Design

Setup and deploy a realistic firewall Configuration on vEdge and IOS-XE
Setup IPS/URL Filtering on IOS-XE Device
Setup Web Layer Security
Monitoring Security Policy
Test and Troubleshoot a Firewall Policy

Lab 7: Designing and Implementing Local Policies and QoS Policies

Design and Implement Lists to Support Local Policies
Design Access List
Advanced QoS Design on Interfaces / Sub Interfaces
Creating Shapers and Policers
Rewriting QoS for External MPLS Circuit
Remarking for Cisco Enterprise QoS Model
Setup Port Mirroring for traffic analysis

Lab 8: Create Advanced Central Policies

Advanced List Design Techniques
Advanced Site Design
Design and Troubleshoot a Hub and Spoke Topology
Design, Configure, and Troubleshoot a Full Mesh Topology
Design, Configure, and Troubleshoot a Hub and Spoke Topology with a Full Mesh Core
Design, Configure, and Troubleshoot Custom Control Policies with Traffic Engineering
Design, Configure, and Troubleshoot a Service Chain with an ASA Firewall
Design, Configure, and Troubleshoot a QoS Policy at the VPN Level
Design, Configure, and Troubleshoot Extranet with a 3rd Party Provider
Design, Configure, and Troubleshoot Application Aware Routing Policy

Lab 9: Monitoring the Environment

Monitoring using vManage
Monitoring using the CLI
Monitoring using vAnalytics

Lab 10: Troubleshooting

Troubleshooting Hardware Issues
Troubleshooting Control Connections
Troubleshooting Certificate Issues
Troubleshooting Controllers
Troubleshooting BFD Sessions
Troubleshooting Templates
Troubleshooting Local Policies
Troubleshooting Central Policies

Implementing and Administering Cisco Solutions (CCNA®) or equivalent knowledge

The job roles best suited to the material in this course are:

System Installers
System Integrators
System Administrators
Network Administrators
Solutions Designers
Systems Architects

This course can be purchased with Cisco Learning Credits (CLCs).

Implementing and Administering Cisco Solutions (CCNA®) or equivalent knowledge

Course Delivery

This course is available in the following formats:

Request this course in a different delivery format.

Download Course Details

Cart () Loading...

Subtotal

Topics

Brands

Topics

Brands

Topics

Brands

Cart () Loading...

Subtotal

SDWAN - Installing, Configuring, Monitoring and Troubleshooting Cisco (Viptela)

Course Overview

Schedule

What You'll Learn

Outline

Classroom Live Outline

Labs

Classroom Live Labs

Prerequisites

Who Should Attend

Vendor Credits

PDUs

Follow-On Courses

Course Delivery