In this 5 day hands-on course on Cisco (Viptela) SD-WAN,  students will deploy and configure SD-WAN Controllers, vEdge Devices, and Cisco IOS-XE Devices. Students will create Multiple Device and CLI Templates that will allow Hundreds of devices to be deployed using only a few Centralized Templates. Students will create Security Policies to enable the Enterprise Firewall, IDS/IPS, URL Filtering, and Web Layer Security to protect and allow Enterprises to deploy Cloud applications as well as Direct Internet Access (DIA).  Students will also create Local and Central Policies that enable a Centralized Policy control of WAN Routing and device QOS configuration and enforcement. Students will also learn how Cisco SD-WAN allows Enterprises to deploy an effective Cloud Solutions such as Amazon AWS, Microsoft Azure, and Google Cloud. Students will also learn how to Monitor and Troubleshoot the SD-WAN Solution.

Use this course towards your Cisco Continuing (CE) Education Credits (40)

Pay by using your Cisco (CLCs) Learning Credits (43) here: Cisco Learning Locator

Why Attend with Current Technologies CLC

• Our Instructors are the top 10% rated by Cisco
• Our Lab has a dedicated 1 Gig Fiber Connection for our Labs
• Our Labs run up to Date Code for all our courses

• SD-WAN Overview
• Cisco SD-WAN Hardware
• Deploying the Overlay
• Configuring vManage
• Deploying using Templates
• Creating Policies
• Monitoring vManage
• vAnalytics
• Troubleshooting Tools for VManage

The job roles best suited to the material in this course are:

• System Installers
• System Integrators
• System Administrators
• Network Administrators
• Solutions Designers
• Systems Architects

Recommended Cisco offerings that may help you meet these prerequisites:

• Implementing and Administering Cisco Solutions (CCNA®) or equivalent knowledge

Module 0: Introductions

Module 1: Cisco SD-WAN (Viptela) Platform Overview

• Lesson 1: Legacy WAN Architecture
• Lesson 2: Cisco SD-WAN / Digital Network Architecture Integration
• Lesson 3: Software Defined Centralized Control
• Lesson 4: Cisco SD-WAN Solution Overview
• Lesson 5: New SD-WAN Terminology
• Lesson 6: Cisco DNA SD-WAN Licensing

Module 2: Deploying Cisco SD-WAN Controllers 

• Lesson 1: Cisco SD-WAN Architecture
• Lesson 2: Cisco SD-WAN Controller Deployment Models
• Lesson 3: Cisco SD-WAN Self Service Portal
• Lesson 4: On-Prem Controller Deployment
• Lesson 5: Create vBond VM Instance on ESXi or KVM
• Lesson 6: Initial vManage Setup
• Lesson 7: Create vBond VM Instance on ESXi or KVM
• Lesson 8: Create vSmart VM Instance on ESXi or KVM
• Lesson 9: Add Controllers to vManage
• Lesson 10: Enterprise CA Configuration
• Lesson 11: vManage Multitenant Mode
• Lesson 12: Upgrade the SD-WAN Environment
• Lesson 13: Upgrade vManage
• Lesson 14: Upgrade Devices via CLI
• Lesson 15: Check Control Plane
• Lesson 16: Controller High Availability and Scale

Module 3: Cisco SD-WAN Allow Lists and Certificates

• Lesson 1: Certificates
• Lesson 2: Certificate Configuration
• Lesson 3: Monitoring and Troubleshooting Certificates

Module 4: Cisco SD-WAN Platforms

• Lesson 1: Platform Positioning
• Lesson 2: Cellular Gateways for SDWAN
• Lesson 3: Catalyst 8200 Series
• Lesson 4: Catalyst 8000v Series Virtual Router
• Lesson 5: Adding IOS-XE to the Fabric
• Lesson 6: Manually Provision SD-WAN IOS-XE
• Lesson 7: 17.X IOS-XE PnP Provisioning
• Lesson 8: Configuration > Devices
• Lesson 9: High Availability and Redundancy Overview

Module 5: Cisco SD-WAN Fabric and OMP

• Lesson 1: Why Fabric Architectures?
• Lesson 2: Overlay Management Protocol (OMP)
• Lesson 3: Transport Locators (TLOCs)
• Lesson 4: Overlay Routing
• Lesson 5: OMP Service / Route Timer
• Lesson 6: Operational Commands

Module 6: Cisco SD-WAN Security

• Lesson 1: Security Solutions
• Lesson 2: Firewall Ports used in SDWAN
• Lesson 3: SD-WAN Security and Segmentation
• Lesson 4: SD-WAN Security Configuration

Module 7: SD-WAN QoS

• Lesson 1: Application Visibility and Recognition (NBAR / QoS)
• Lesson 2: Bidirectional Forwarding Detection (BFD)
• Lesson 3: Forward Error Correction (FEC) / Packet Duplication
• Lesson 4: TCP Optimization

Module 8: Configuring vManage

• Lesson 1: vManage Dashboard
• Lesson 2: Monitoring
• Lesson 3: Tools
• Lesson 4: Settings
• Lesson 5: Resource Groups / Users / Groups

Module 9: Creating and Applying SD-WAN Templates

• Lesson 1: Templates
• Lesson 2: Feature Templates
• Lesson 3: Device Templates
• Lesson 4: System Feature Templates
• Lesson 5: Apply Template to a Device

Module 10: Creating and Applying Policies

• Lesson 1: Policy Concepts
• Lesson 2: Centralized Policies (Control, Data, AppRoute, cFlowd)
• Lesson 3: Centralized Control Policies-Multi-Domain Data Plane Case Studies
• Lesson 4: Centralized Control Policy Components
• Lesson 5: Traffic Engineering
• Lesson 6: SD-WAN Policy Framework – Use Cases
• Lesson 7: Centralized Policy Framework - App-Route Policies
• Lesson 8: Centralized Data Polices
• Lesson 9: Centralized Data Policies –VPN Membership Policy
• Lesson 10: Centralized Data Polices – cFlowd Policy
• Lesson 11: Policy Framework – Internet Breakout / DIA
• Lesson 12: SD-WAN Local Policies

Module 11: SD-WAN Cloud Adoption

• Lesson 1: Cloud Services Adoption
• Lesson 2: Cloud OnRamp – SaaS
• Lesson 3: Cloud-Onramp for IAAS / Multicloud

Module 12: vAnalytics Overview

• Lesson 1: vAnalytics Overview
• Lesson 2: vAnalytics Dashboard
• Lesson 3: vAnalytics Applications
• Lesson 4: vAnalytics Network Availability
• Lesson 5: vAnaylics Flows

Module 13: Monitoring & Troubleshooting the SD-WAN Solution

• Lesson 1: SD-WAN Support Options
• Lesson 2: Monitoring
• Lesson 3: ThousandEyes
• Extended visibility with Cisco SD-WAN + ThousandEyes
• SD-WAN + ThousandEyes Supported Platforms
• Deployment Options
• ThousandEyes Probing
• Lesson 4: Compliment with LiveAction
• Lesson 5: SNMP
• Lesson 6: Controller Failures
• Lesson 7: Troubleshooting Controllers
• Lesson 8: Troubleshooting Devices When They Don’t Join the Fabric
• Lesson 9: Device Configuration and Upgrades Failure
• Lesson 10: Troubleshooting cEdge
• Lesson 11: Troubleshooting using vManage
• Lesson 12: Device Troubleshooting
• Lesson 13: Using the GUI for cli show command Under Troubleshooting > Real-time
• Lesson 14: CLI Troubleshooting
• Lesson 15: vManage, APIs & Programmability

LAB OUTLINE

Lab 1: Deploy the SD-WAN Controller

• Deploy the vManage Controllers
• Deploy the vBond Orchestrator
• Deploy the vSmart Controller
• Configure Certificate Settings

Lab 2: Deploy the vEdge, ISR 4K /C8000V Routers

• Deploy WAN Edges
• Configure the WAN Edge Routers
• Prepare vEdge Routers for ZTP

Lab 3: vManage Configuration

• Explore the Interface
• Add Controllers to the Whitelist
• Add vEdge whitelist
• BFD Tuning
• Create and Update Users
• Manage the Fabric

Lab 4-8: Creating Device Templates 

• Create CLI Policy Template
• Create Feature Policy Template
• Create vSmart Device CLI Template
• Create DC1 vEdges Device Feature Template
• Attach DC1 Devices to Template
• Create DC2 IOS-XE CSRs Device Feature Template
• Attach DC2 Devices to Template
• Create BR1 vEdges Device CLI Template using TLOC Extensions
• Attach BR1 Devices to Template
• Create BR2 IOS-XE CSRs Device Feature Template using TLOC Extensions
• Attach BR2 Devices to Template
• Create BR3 IOS-XE ISR4K Device Feature Template
• Attach BR3 Devices to Template
• Configuration Rollback

Lab 9: Use APIs to Import Feature Templates

Lab 10: Upgrade SDWAN Environment 

Lab 11-13: Perform ZTP on SDWAN Environment 

Lab 14-17: SDWAN Policies 

• List types of policies that can be implemented in the SD-WAN solution
• Describe how policies can be implemented that affect the control plane
• Describe what affect policies can have on data traffic forwarding
• Identify the various components of the vSmart policy architecture
• Describe how different policies are enabled in different devices
• Detail how policies are processed and applied
• Control Policy Lab
  • Configure a Vpn-membership-policy
  • Configure Site-list Selection Policies
  • Configure a Service Chaining Policy
  • Configure an Extranet VPN Policy
  • Configure a Service path affinity Policy
  • Configure Fabric Policies
  • Configure Security Zones
• Data Policy Lab
  • Configure Shaping Policies
  • Configure QoS Policies
  • Configure a Service Chaining
  • Configure an Extranet VPN Policy
  • Configure Service path affinity Policy
  • Configure a NAT Policies for DIA
  • Configure an OSPF BGP Routing Policy
• Application Aware Routing Policy Lab
  • SLA Classes
  • Path Selection using Application Policies
• Create a cFlowd Policy
• Create a Local Control Policy
  • Configure OSPF and BGP
• Create a Local Data Policy
  • Create ACL
  • Create Device Access Policy
  • Configure QOS
  • Configure OSPF Route Policy

Lab 18: Application Visibility

• Create a Centralized Policy for Application-Aware Routing
• Identify Application Groups (FTP/Office 365/Voice)
• Create Lists
  • Site Lists
  • Application Lists
  • Data Prefix Lists
  • VPN Lists
• Create a SLA Classes
• Create Traffic Rules
• Apply Policies to Sites and VPNs

Lab 19: Cloud On-RAMP 

• Configure Cloud Onramp for SAAS

Lab 20: Monitoring / Troubleshooting

• Explore vManage Dashboard analytics
• Monitor Applications
• Monitor Loss, Latency, and Jitter
• Monitor Individual Device
  • Check system Status
  • Check Control Connections
  • Check OMP Status
  • Check BFD Status
  • Check Interfaces for Issues
• Use the CLI to view and troubleshooting debug Logs
• Troubleshoot BFD
• Troubleshoot OMP
• Use troubleshooting tools to diagnose issues
  • Use the Ping tool
  • Use the Traceroute tool
  • Use the App Route Visualization
  • Simulate traffic flows
  • Take a Packet
• Troubleshoot Application Routing