Installing, Configuring, Monitoring and Troubleshooting Cisco Catalyst SD-WAN (SDWAN) V2.0

This five-day hands-on instructor-led course offers comprehensive training on Cisco Catalyst (Viptela) SD-WAN, focusing on the 20.12 release for SD-WAN and the 17.12 release for IOS-XE, explicitly designed for Network professionals. Throughout the course, participants will gain hands-on experience with the administration and configuration of SD-WAN Controllers and Cisco IOS-XE devices.

Cisco Catalyst SD-WAN Overview:

• Learn about the fundamentals of Cisco Catalyst SD-WAN, focusing on centralized control, connectivity, performance optimization, and security features like Zero-Touch Provisioning, direct cloud access, and application-aware routing.

Deployment and Configuration of SD-WAN Controllers:

• Understand how to deploy, manage, and upgrade SD-WAN Controllers (vManage, vSmart, and vBond) on cloud services or on-premise servers.

Router Configuration and Management:

• Master the deployment and management of IOS-XE routers using templates and configuration groups, focusing on the Cisco Catalyst 8000 Series Edge Platforms and ISR 4000 Series.

SD-WAN Fabric Optimization:

• Learn to deploy the SD-WAN fabric using Overlay Management Protocol (OMP) and understand the importance of Transport Location (TLOC) for maintaining the network overlay.

Upgrading the Catalyst SD-WAN Network:

• Gain skills in planning and executing network upgrades, including backup procedures, version compatibility management, and troubleshooting issues during upgrades.

Feature and Device Templates:

• Explore the creation and management of Feature and Device Templates within the SD-WAN architecture to standardize and simplify network device configurations.

Configuration Groups:

• Learn to create and manage Configuration Groups in vManage, applying configurations to multiple devices for streamlined network management.

Deploying Network QoS:

• Understand and deploy SD-AVC, dynamic bandwidth allocation, Forward Error Correction (FEC), and packet duplication to enhance network performance and reliability.

Security and Cloud Security:

• Dive into Cisco's multi-layered security strategy, including integrated security features, Zero Trust models, and Cloud Security with SASE, tailored for networks.

Local and Central Policy Implementation:

• Learn to create and manage local and central policies, including traffic routing, application prioritization, and security enforcement within the SD-WAN environment.

Cloud On-RAMP:

• Explore Cloud OnRamp services, including optimizing SaaS performance and extending SD-WAN to IaaS providers like AWS, Azure, and Google Cloud.

Monitoring and Troubleshooting Catalyst SD-WAN:

• Master network monitoring and troubleshooting techniques using vManage, including real-time data analysis, diagnostics, and performance optimization.

Hands-On Labs:

• Practical labs include deploying and upgrading IOS-XE routers, configuring CLI Templates, Device Templates, Configuration Groups, and implementing various SD-WAN policies.

• Cisco Catalyst SD-WAN Overview
• Deployment and Configuration of SD-WAN Controllers
• Router Configuration and Management
• SD-WAN Fabric Optimization
• Upgrading the Catalyst SD-WAN Network
• Feature and Device Templates
• Configuration Groups
• Deploying Network QoS
• Security and Cloud Security
• Local Policy Implementation and Mangement
• Central Policy Implementation and Management
• Cloud On-RAMP
• Monitoring and Troubleshooting Catalyst SD-WAN

Who should sit this course?

This course is suitable for Network Engineers, System Administrators, IT Professionals, Technical Support Staff, and Cisco-Certified Professionals looking to enhance their skills and proficiency with Cisco Catalyst (Viptela) SD-WAN network management tailored for government networks. 

The course is highly recommended for:

• Network Engineers: Professionals tasked with the design, implementation, and maintenance of government network infrastructure. This includes managing both Catalyst SD-WAN and data communication systems, ensuring they meet the high standards required for government operations.
• System Administrators: Individuals responsible for the daily management and configuration of government network systems. Their role is crucial in ensuring the reliable operation of Catalyst SD-WAN and WAN services across various government departments.
• IT Professionals in Government Agencies: This group includes a wide range of IT personnel working within government agencies who require a robust understanding of secure and reliable Catalyst SD-WAN network systems. Their work is critical in ensuring that these networks comply with stringent government standards and regulations.
• Technical Support Staff: These are the frontline personnel who provide essential technical support for Catalyst SD-WAN network systems within government environments. Their expertise ensures that any issues are promptly resolved to maintain network integrity and security.
• Cisco Certified Professionals: Individuals who have already achieved Cisco certifications and are looking to further their knowledge and expertise specifically in Meraki Networks and Technologies. This course offers them an opportunity to specialize in Meraki solutions, enhancing their skill set in the context of government network requirements.

N/A

Module 0: Introductions

Module 1: Catalyst SD-WAN (Viptela) Platform Overview

• Module Topics
• Lesson 1: SD-WAN WAN Architecture Overview
• Lesson 2: Cisco SD-WAN Solution Overview
• Lesson 3: New Features by Version
• Lesson 4: Licensing for Cisco SD-WAN
• Lesson 5: SD Routing Overview (20.12)
• Module Summary

Module 2: Cisco SD-WAN Controllers 

• Module Topics
• Lesson 1: Cisco SD-WAN Controller Architecture
• Lesson 2: Cisco Catalyst SD-WAN Portal
• Lesson 3: Multitenant Tenancy
• Lesson 4: Controller High Availability
• Lesson 5: Verify Control Plane
• Module Summary

Module 3: Cisco SD-WAN Allow Lists and Certificates

• Module Topics
• Lesson 1: Certificate Fundamentals
• Lesson 2: SD-WAN Certificates
• Lesson 3: Certificate Configuration
• Lesson 4: Certificate Validity
• Lesson 5: Monitoring and Troubleshooting Certificates
• Module Summary

Module 4: Catalyst SD-WAN Platforms

• Module Topics
• Lesson 1: SD-WAN Platform Overview
• Lesson 2: SD-WAN vEdge Platforms
• Lesson 3: SD-WAN Industrial Router Portfolio
• Lesson 4: SD-WAN ISR 1000/1100 Series Routers
• Lesson 5: Cisco ISR 4000 Series Routers
• Lesson 6: Cisco ASR 1000 Routing Portfolio
• Lesson 7: Catalyst 8000 Series Router Overviews
• Lesson 8: Catalyst 8500 Series Routers
• Lesson 9: Catalyst 8300 Series Routers
• Lesson 10: Catalyst 8200 Series Routers
• Lesson 11: Catalyst 8000v Series Virtual Router
• Lesson 12: Catalyst 8000 SD-WAN Supported Modules
• Lesson 13: Cellular Gateways for SDWAN
• Lesson 14: SD-WAN WAN Edge High Availability
• Module Summary

Module 5: Cisco SD-WAN WAN Edge Deployments        

• Module Topics
• Lesson 1: Adding Device to the PNP Portal
• Lesson 2: Device Initial Bootup and Image Selection
• Lesson 3: SD-WAN Zero Touch Provisioning
• Lesson 4: SD-WAN Quick Connect
• Lesson 5: Manually Provision SD-WAN IOS-XE
• Lesson 6: Verifying SD-WAN WAN Edge Configuration
• Module Summary

Module 6: Configuring SD-WAN Manager

• Module Topics
• Lesson 1: Dashboard Overview and Changes
• Lesson 2: SD-Wan Manager Monitoring Dashboard
• Lesson 3: SD-WAN Manager Configuration
• Lesson 4: SD-WN Manager Tools
• Lesson 5: SD-WAN Manager Maintenance
• Lesson 6: Administrative Settings
• Lesson 7: Resource Groups
• Lesson 8: Users and Groups
• Lesson 9: RADIUS and TACACS
• Lesson 10: Single Sign-On / IDP Management
• Lesson 11: License Management
• Lesson 12: Network Wide Path Insight
• Module Summary

Module 7: SD-WAN Software Upgrades

• Module Topics
• Lesson 1: Upgrading the SD-WAN Environment
• Lesson 2: Upgrade SD-WAN Controllers
• Lesson 3: Software Upgrade Workflow Version 20.10 / 17.10
• Lesson 4: Upgrading Devices via CLI
• Module Summary

Module 8: SD-WAN OMP/Fabric

• Module Topics
• Lesson 1: SD-WAN Fabric Overview and Terminology
• Lesson 2: SD-WAN Segmentation
• Lesson 3: OMP / TLOCs / Routes
• Lesson 4: SD-WAN BFD
• Lesson 5: On-Demand Tunnels
• Lesson 6: SD-WAN Fabric Verification
• Module Summary

Module 9: SD-WAN QoS / QoE

• Module Topics
• Lesson 1: QoE / QoS Challenges
• Lesson 2: Quality of Experience (QoE) / Quality of Service (QoS)
• Lesson 3: Per-Tunnel QoS
• Lesson 4: Adaptive QoS
• Lesson 5: Per VPN QoS
• Lesson 6: Application Quality of Experience (AppQoE)
• Lesson 7: Forward Error Correction (FEC) / Packet Duplication
• Lesson 8: TCP Optimization
• Lesson 9: Data Redundancy Elimination (DRE) / Lempel-Ziv Compression (LZ)
• Lesson 10: SD-AVC / Microsoft O365 Telemetry
• Module Summary

Module 10: SD-WAN Security / SASE

• Module Topics
• Lesson 1: Security Overview
• Lesson 2: Secure Access Service Edge (SASE)
• Lesson 3: SD-WAN Fabric Security
• Lesson 4: SD-WAN Security Options
• Lesson 5: SD-WAN Integrated Security
• Lesson 6: SD-WAN Security Configuration
• Lesson 7: Cisco Umbrella
• Module Summary

Module 11: Creating and Applying SD-WAN Templates

• Module Topics
• Lesson 1: Template Overview
• Lesson 2: Feature Templates
• Lesson 3: Device Templates
• Lesson 4: CLI Templates
• Lesson 5: Create Device Templates using Feature Templates
• Lesson 6: Attaching Devices to Templates
• Lesson 7: Configuration Groups Overview
• Lesson 8: Creating Configuration Groups
• Lesson 9: Deploy Configuration Group Workflow
• Lesson 10: View/Edit Configuration Groups
• Module Summary

Module 12: SD-WAN Local Policy

• Module Topics
• Lesson 1: Local Policy Overview
• Lesson 2: Local Policy Lists
• Lesson 3: Local Data Policies
• Lesson 4: Local Policy QoS Configuration
• Lesson 5: Access Control Lists
• Lesson 6: Localized Control Policy
• Lesson 7: Save and Apply Local Policy
• Module Summary

Module 13: SD-WAN Central Policies

• Module Topics
• Lesson 1: Central Policy Overview
• Lesson 2: Central Control Policy
• Lesson 3: Control Policy – Dis-contiguous Data Planes
• Lesson 4: Control Policy – Data Center Priority
• Lesson 5: Control Policy – VPN Topologies
• Lesson 6: Control Policy – VPN Membership Policy
• Lesson 7: Control Policy – Application-Aware Routing
• Lesson 8: Control Policy – Service Chaining
• Lesson 9: Central Data Policies
• Lesson 10: Central Data Policies – Use Cases
• Lesson 11: Central Data Policies - Cflowd
• Lesson 12: Creating Centralized Policies
• Module Summary

Module 14: Cisco SD-WAN with ThousandEyes Integration

• Module Topics
• Lesson 1: ThousandEyes Introduction
• Lesson 2: Architecture and SD-WAN Deployment
• Lesson 3: Troubleshooting ThousandEyes SD-WAN Deployments
• Module Summary

Module 15: Cloud Onramp for SaaS

• Module Topics
• Lesson 1: Cloud OnRamp - Overview
• Lesson 2: Cloud OnRamp for SaaS Overview
• Lesson 3: Cloud OnRamp for M365
• Lesson 4: Cloud OnRamp for Webex
• Lesson 5: Cloud OnRamp for Enterprise & Custom Apps
• Lesson 6: Cloud OnRamp for SaaS – Security
• Lesson 7: Deployment Use cases
• Lesson 8: Cloud OnRamp for SaaS Configuration
• Lesson 9: Cloud OnRamp for SaaS Monitoring
• Module Summary

Module 16: Analytics (vAnalytics) 3.0

• Module Topics
• Lesson 1: Analytics Overview
• Lesson 2: Analytics Dashboards
• Lesson 3: Analytics IDP Onboarding
• Lesson 4: Analytics KPIs and Scores
• Lesson 5: Cisco Analytics Troubleshooting
• Lesson 6: Analytics Onboarding & Access Workflow
• Module Summary

Module 17: Monitoring & Troubleshooting the SD-WAN Solution

• Module Topics
• Lesson 1: SD-WAN Troubleshooting Overview
• Lesson 2: SD-WAN Technical Support Access
• Lesson 3: Controller Failure Scenarios
• Lesson 4: Troubleshooting Controllers
• Lesson 5: Troubleshooting Control Connections
• Lesson 6: Typical Control Connection Issues
• Lesson 7: Troubleshooting Data Plane
• Lesson 8: Troubleshooting Routing
• Lesson 9: Centralized Policies Troubleshooting
• Lesson 10: Packet Forwarding Troubleshooting
• Lesson 11: Device Configuration and Upgrades Failure
• Lesson 12: vDiagnose - Diagnostic Tool for SD-WAN
• Lesson 13: Troubleshooting cEdge
• Lesson 14: Troubleshooting using SD-WAN Manager (vManager)
• Lesson 15: Device Troubleshooting
• Lesson 16: Using the GUI for cli show command Under Troubleshooting > Real-Time
• Lesson 17: CLI Troubleshooting
• Lesson 18: Netflow Collectors
• Lesson 19: SNMP Overview
• Lesson 20: SD-WAN Logs
• Lesson 21: SD-WAN Reporting
• Lesson 22: SD-WAN Manager (vManager), APIs & Programmability
• Module Summary

Appendix A: Deploying SD-WAN Controllers

• A: On-Prem Controller Deployment
• B: Create vManage VM Instance on ESXi or KVM (slide 6)
• Lesson 3: Initial vManage Setup (slide 30)
• Lesson 4: Create vBond VM Instance on ESXI or KVM (slide 44)
• Lesson 5: Create vSmart VM Instance on ESXI or KVM (slide 63)
• Lesson 6: Add Controllers to vManage (slide 81)
• Lesson 7: Enterprise CA Configuration (slide 87)
• Module Summary

LAB OUTLINE

Lab 1: Deploy the SD-WAN Controller

• Deploy the vManage Controllers
• Deploy the vBond Orchestrator
• Deploy the vSmart Controller
• Configure Certificate Settings

Lab 2: Deploy the vEdge, ISR 4K /C8000V Routers

• Deploy WAN Edges
• Configure the WAN Edge Routers
• Prepare vEdge Routers for ZTP

Lab 3: vManage Configuration

• Explore the Interface
• Add Controllers to the Whitelist
• Add vEdge whitelist
• BFD Tuning
• Create and Update Users
• Manage the Fabric

Lab 4-8: Creating Device Templates 

• Create CLI Policy Template
• Create Feature Policy Template
• Create vSmart Device CLI Template
• Create DC1 vEdges Device Feature Template
• Attach DC1 Devices to Template
• Create DC2 IOS-XE CSRs Device Feature Template
• Attach DC2 Devices to Template
• Create BR1 vEdges Device CLI Template using TLOC Extensions
• Attach BR1 Devices to Template
• Create BR2 IOS-XE CSRs Device Feature Template using TLOC Extensions
• Attach BR2 Devices to Template
• Create BR3 IOS-XE ISR4K Device Feature Template
• Attach BR3 Devices to Template
• Configuration Rollback

Lab 9: Use APIs to Import Feature Templates

Lab 10: Upgrade SDWAN Environment 

Lab 11-13: Perform ZTP on SDWAN Environment 

Lab 14-17: SDWAN Policies 

• List types of policies that can be implemented in the SD-WAN solution
• Describe how policies can be implemented that affect the control plane
• Describe what affect policies can have on data traffic forwarding
• Identify the various components of the vSmart policy architecture
• Describe how different policies are enabled in different devices
• Detail how policies are processed and applied
• Control Policy Lab
• Configure a Vpn-membership-policy
• Configure Site-list Selection Policies
• Configure a Service Chaining Policy
• Configure an Extranet VPN Policy
• Configure a Service path affinity Policy
• Configure Fabric Policies
• Configure Security Zones
• Data Policy Lab
  • Configure Shaping Policies
  • Configure QoS Policies
  • Configure a Service Chaining
  • Configure an Extranet VPN Policy
  • Configure Service path affinity Policy
  • Configure a NAT Policies for DIA
  • Configure an OSPF BGP Routing Policy
• Application Aware Routing Policy Lab
• SLA Classes
• Path Selection using Application Policies
• Create a cFlowd Policy
• Create a Local Control Policy
• Configure OSPF and BGP
• Create a Local Data Policy
• Create ACL
• Create Device Access Policy
• Configure QOS
• Configure OSPF Route Policy

Lab 18: Application Visibility

• Create a Centralized Policy for Application-Aware Routing
• Identify Application Groups (FTP/Office 365/Voice)
• Create Lists
• Site Lists
• Application Lists
• Data Prefix Lists
• VPN Lists
• Create a SLA Classes
• Create Traffic Rules
• Apply Policies to Sites and VPNs

Lab 19: Cloud On-RAMP 

• Configure Cloud Onramp for SAAS

Lab 20: Monitoring / Troubleshooting

• Explore vManage Dashboard analytics
• Monitor Applications
• Monitor Loss, Latency, and Jitter
• Monitor Individual Device
  • Check system Status
  • Check Control Connections
  • Check OMP Status
  • Check BFD Status
  • Check Interfaces for Issues
• Use the CLI to view and troubleshooting debug Logs
• Troubleshoot BFD
• Troubleshoot OMP
• Use troubleshooting tools to diagnose issues
  • Use the Ping tool
  • Use the Traceroute tool
  • Use the App Route Visualization
  • Simulate traffic flows
  • Take a Packet
• Troubleshoot Application Routing