Ask Me Anything- Cisco SD-WAN Policies: Leveraging the Full Power of Cisco SD-WAN

[ciscomoderator]

This topic is a chance to clarify your questions about Cisco’s SD-WAN technical terms such as Transport Locators (TLOCs) and routes, and the best practices to benefit from the full power of Cisco SD-WAN by leveraging policies. The session will address questions such as; How do you stitch together Multiprotocol Label Switching (MPLS) and Internet-only branches? How do you prefer one Data Center (DC) over another? How do you build hub and spoke topologies? What are the trade-offs in the implementation? And What is the difference between a centralized and a localized policy?

To participate in this event, please use the button below to ask your questions

Ask questions from Friday, March 20 to Friday, April 3, 2020

Featured Experts

Daniel Dib is a Senior Network Architect at Conscia. He works with creating scalable, modular, and highly available network designs that meet business needs. He started out his career in the implementation and operations field. Daniel obtained his CCIE certification in 2012 and in May 2016 he became the second person in Sweden to get CCDE certified. Daniel has been recognized as a Cisco Designated VIP by the Cisco Learning Network. He often acts as a subject matter expert for his customers with deep expertise in routing, switching, multicast, and fast convergence. Daniel holds a CCIE Enterprise (#37149) and a CCDE (#20160011).

David Samuel Peñaloza Seijas works as a Senior Network Consulting Engineer at Verizon Enterprise Solutions in the Czech Republic. Previously, he worked as a Network Support Specialist in the IBM Client Innovation Center in the Czech Republic. David is an expert interested in all topics related to networks. However, he focuses mainly on data centers, enterprise networks, and network design, including software-defined networking (SDN). David has a long relationship with Cisco. He has been a Cisco Instructor for the Cisco Academy and was recognized as a Cisco Champion and a Cisco Designated VIP for 2017, 2018, 2019 and 2020. David holds CCNP R&S, CCDP, CCNA Security, CCNA CyberOps, and CCNA SP certification. Currently, he is pursing a CCDE.

Daniel & David might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the SD-WAN category.

Find further events on https://community.cisco.com/t5/custom/page/page-id/Events?categoryId=technology-support

Do you know you  can get answers before opening a TAC case by visiting the Cisco Community.  

**Helpful votes Encourage Participation! **
Please be sure to rate the Answers to Questions

[David Samuel Penaloza Seijas]

As vBond works as a STUN server, the Edges can act as clients and report their current IP addresses and ports so vBond can perform discovery. This is specially useful in scenarios where NAT hides path information, and its therefore complex to establish connections.

In essence: through STUN it will discover the pre and post NAT IP addresses and ports and then communicate this information to the Edge devices to communication can be established.

The following document provides a graphical representation: https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/TECCRS-2014.pdf

Slides 66 and 67.

Hope it helps!

[sdwan_mike]

Is it possible to have SD-WAN do the following:

Branch has 2 ISP links, two edge routers. Build a policy that does the following:

1.) Check which link has less latency and use this link.

I know you can do this with a static latency configuration via policy. red < 100ms use red.

I was wondering if this can be more dynamic like by formula: if red < blue latency then use red or else blue.

[David Samuel Penaloza Seijas]

This measurement is performed dynamically by the Application Aware Routing policy, polling BFD probes and considering an average between all buckets.

The swiftness of the policy will depend on the amount of buckets, their length and the multiplier of the BFD hello. Its completely customizable by you. One color would be backup of the other. The mechanism can be quite fast, but may rise the likelihood of false positive occurrence.  

[CCNPHopeful]

Hello

Is there anyway to simulate SD Access and WAN.

Ideally with GNS3 and a vmware windows using DNA Centre?

[David Samuel Penaloza Seijas]

I dont think you can emulate SDA, they are proprietary software with specific appliances.

For SD-WAN however, you can emulate it in some software out there (not GNS3 as far as I know).

[Hilda Arteaga]

Dear Daniel and David

Thank you so much for all your support and time to make this event possible. We have learned lots!