Hi All, I have a client looking to deploy SD WAN remote access. They currently use Palo Alto firewalls, and have Global Protect as their VPN client. Naturally, all of the cisco documentation only mentions any connect. There is a small mention of 3rd ...
Forum Posts
Resolved! AAA for SDWAN manager users
Hi one of our clients wants to use Tacacs for users accessing SDWAN manager. i have not seen any option in the vmanage GUI has anyone done this . if yes, please guide. Thanks in advance.
Hi, what if during a migration you need to rollback the SDWAN config to the previous non-sdwan config. (Note that I'm not talking about the IOS software, just the config). Just detaching the device won't help as the SDWAN-config will stay in place (a...
I have a small SD-WAN setup for a company with two "DC" locations using SDCI/Cloud On-Ramp to my main AWS subscription and two remote sites that connects via the SD-WAN to the SDCI to access the workload. I have two test AWS subscription that are not...
Hello Guys, Am trying to implement Feature Template but getting following error, i have same feature templates for both vpn0 and vpn512 with interface id difference. ####################################################################### 19-Jan-202...
Resolved! HUB-ANB-SPOKE TOPOLOGY DOESN'T WORK
Hi there,I'm having a problem with a HUB-AND-SPOKE TOPOLOGY, my HUB is site 1, and my SPOKEs are: site 3 and site 4. The problem is that when I apply the centralized policy my spokes doesn't installed any route. Here is the topology:The config of my ...
hi how do you configure a cedge where there is no oob? can you configure vpn 512 on say subnet 10.0.0.0/24 with ip of .1 and configure same subnet in vpn 10( service vpn) and have ip of .254 there so in essence loop management through vpn 10? can yo...
Resolved! OMP doesn't come up
Hi Everyone,I have I problem with my SD-WAN topology. I can get any OMP peers between vEdges, what should I do?Here is the output
Hi Community, I am trying to move my SD-WAN to use Configuration-Groups.most of the stuff I can build with configuration-groups as I had it befor with Device and feature templates.Burt there is one missing link In the feature-template of a WAN interf...
I'm doing a SDWAN lab in and I'm unable to login into v-manage Gui using the username and password. its keep on asking the username password again and again. v-manage-version 20.9.3.1 if someone knows the solution, please help me with it. systemhost-...
Resolved! NAT-traversel and server STUN vBond
Helloi want to knwo what's mean NAT-traversel for vBond ? ans also wha'ts mean server STUN for v Bond ? i wait a reply from expert SD-wan cisco Thanks
Resolved! SD-WAN AVC portal
I enabled AVC on vManage and i see it is enabled and running thru cli, but I can't access AVC portal thru https://<vmanage_ip>:8443 It opens vmanage gui not AVC portal Is the portal still available? i am running software version 20.9.3 in multitenan...
Resolved! Wrong BGP AS-PATH in the routing table
Hello Experts, I have been looking into this long enough and need help. See below. chr-r1 is advertising shorter AS-PATH. However, the lab router is showing 2611:6bC0:6000::/40 as the same length. Any idea? lab-r1#sh ipv route vrf 13 2611:6bC0...
Resolved! vEdge authentication
Assumption: to receive a device certificate, the (virtual) vEdge generates a CSR to a vManage of a fabric.Doesn't the vEdge find the vManage through the vBond? Are unverified vEdges able to find the vManage of a fabric before the vBond of the fabric ...
What is the purpose of using preference inside tloc list?and can we see the changing on the cEdge? In almost cases I use preference via topology policy and I can see it through command sh sdwan omp routes and nevere use preference inside tloc list
