Software-Define Networking
(SDN)

Open sections, no tabs. Use the jump links or just scroll.

SD-WAN SDA

Implementing SD-WAN

From underlay and PKI to controller bring-up, templates, policies and QoS.

Introduction to SD-WAN

SD-WAN fundamentals Node roles & control/data communications Controller deployment models WAN Edge platforms & options VRFs/VPNs on fabric devices

Non-SD-WAN Component Setup

Underlay / WAN reachability setup Enterprise PKI / certificate authority

Controller Initialization

vManage bring-up (CLI) vManage initial wizard (GUI) vBond bootstrap (CLI) Add vBond to vManage vSmart bootstrap (CLI) Register vSmart on vManage

WAN Edge Onboarding

Edge onboarding flow overview vEdge bootstrap (CLI) Register vEdges in vManage cEdge bootstrap (CLI) Register cEdges in vManage

Templates — Feature & Device

Templates overview Feature: System Feature: Banner Feature: VPN0/VPN512 & interfaces (branch) Feature: OSPF in VPN0 (branch) Device template rollout — branch vEdge Internal routing on LAN (HQ & branches) Service VPN: VPN/Interfaces/Internal routing Service VPN rollout via templates OMP, TLOCs, ECMP & traffic walkthrough HQ vEdge1: VPNs, interfaces, routing HQ device template (VPN 0/1/512) CSR features: VPN0/1, OSPF (ext/int) CSR device template (VPN0 & Service VPN1)

Centralized Policies (vSmart)

Policy architecture overview vSmart feature/device templates App-aware policies (Telnet/Web) App-aware with DPI TLOC-based traffic engineering Route filtering in policies Hub-and-spoke via TLOC steering Direct Internet Access (DIA)

Advanced Edge Scenarios

Prep controllers/routers (topology variant 2) Multi-edge & multi-transport sites TLOC extensions vEdges behind NAT

QoS on SD-WAN

QoS & localized policy concepts Build custom QoS components Configure schedulers & queues Apply localized QoS policies Interface QoS via templates

Implementing SDA

DNAC + ISE integration, LAN automation, fabric build, L3 handoff and policy.

Introduction to SDA

SDN fundamentals SDA concept overview ACI vs SDA (compare) Control & data planes in fabric Shared services & external reach Virtual Networks & macro-segmentation SDA components & roles DNAC ↔ ISE integration overview

Non-SDA Components

Configure DNAC–ISE integration Border switch baseline Fusion router baseline

DNAC Design Components

Sites & buildings hierarchy Servers (AAA, NTP) Device credentials IP address pools

LAN Automation & Discovery

Discover seed device (border) Assign seed to HQ Underlay for manual discovery Discover fabric edge nodes Assign edges to HQ building Cleanup prior to LAN automation Enable LAN automation Provision devices to HQ site

Fabric Build & L3 Handoff

Reserve overlay/underlay pools Create Virtual Networks Transit network (L3 handoff) Host onboarding Provision control-border Provision edge devices Align fusion router with border

ISE for SDA

Users & groups Authorization profiles Authorization policies DHCP for clients Validate macro-segmentation

Micro-Segmentation

Create SGTs Update ISE policies to use SGTs Default contract (deny-all) Build SGACL contracts Apply & verify SGACLs