Cisco SD-WAN Global Forum : Quick Guide to Design, Deploy, Operate, and Maintain - AMA

[ciscomoderator]

Español

Português

Français

Русский

日本語

简体中文

All the knowledge of these four experts at your disposal!

Cisco Software-Defined Wide Area Network (SD-WAN) provides a highly scalable, resilient, and secure network infrastructure. With advanced security features built into the solution, automation, centralized management, and monitoring, Cisco SD-WAN enables you to control your network through a single dashboard, reduce operating costs, and ensure the best possible experience for your users in local applications or on the cloud.

In this event, the experts will help you understand how Cisco SD-WAN is designed and its main benefits.
They will explore everything from the basic solution design, which license to choose, or which router to select, to overall design and deployment best practices. vManage allows you to configure devices, templates, security / control policies and much more... What if, for some reason, vManage fails? We will help you master an understanding of the policy framework and common troubleshooting tools and learn from programmatic methods to create backups in the SD-WAN environment.

This event is for Cisco SD-WAN beginners and advanced professionals.

To participate in this event, please use the  button below to ask your questions

Ask questions from Monday, March 8 to Friday, March 19, 2021

Featured experts

Guilherme Lyra is a Solutions Architect focused on the Enterprise Networking area. With more than 14 years of experience in networking and security technologies, he has designed and led the implementation of projects with national and global extension for companies in segments such as retail, manufacturing, utilities, and government agencies. Guilherme has also conducted training on Software-Defined Networks and WAN optimization. He holds Cisco CCNP, Cisco CCDP, Juniper JNCIA, and Meraki CMNA certifications.

Danny Blais joined Cisco in 2000 in the role of Lab Administrator. In 2004, he moved to RTP, North Carolina for one year to be part of an incubator program leading him to a Systems Architect role. He is currently based out of Montréal and supports a major enterprise account in the Québec province. Danny has a college degree in computer science with a networking specialty. He has specialized in many Cisco technologies over the years, from Unified Communications to Data Center and now for the last couple of years Cisco SD-WAN. He holds multiple Cisco certifications: CCNA, CCDA, CCNP, CCDP, and CMNA.

Osvaldo Salazar Tovar is currently in the role of Solutions Architect for Cisco SD-WAN technology for Latin America. He works with the partner ecosystem to deliver new approaches to simplify and optimize their WAN environments to end customers from different verticals, using the Cisco portfolio as a digital transformation platform. Osvaldo graduated from ITESM, and has several certifications such as CCNP R&S, DevNet Associate, and SD-WAN Specialist.

Thomas Matzeu graduated from the French University of Evry. He began as a Deployment Engineer in France, specializing in routing, switching, and security. Thomas joined Cisco in September 2018 as a Pre-Sales Engineer in the Global Virtual Engineering team and focuses on Enterprise Networking technologies such as SD-Access and SD-WAN in Europe.

Guilherme, Danny, Osvaldo and Thomas might not be able to answer each question due to the volume expected during this event. For more information, visit the Networking Discussions category.

Find further events on Networking Events list.

Do you know you can get answers before opening a TAC case by visiting the Cisco Community?  

**Helpful votes Encourage Participation! **
Please be sure to rate the Answers to Questions

[Guilherme Lyra]

Hi,

Thank you for your question. I will try to point you to some Cisco documentations, books and labs so you will be able to get not only theorical knowledge but also some hands-on practice with SD-WAN.

Cisco SD-WAN Design Guide:

https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-design-guide.html

User Documentation / Config Guides
https://www.cisco.com/c/en/us/td/docs/routers/sdwan/config/ios-xe-sdwan17.html

Books
Cisco Software-Defined Wide Area Networks: Designing, Deploying and Securing Your Next Generation WAN with Cisco SD-WAN
https://www.ciscopress.com/store/cisco-software-defined-wide-area-networks-designing-9780136533177

Cisco DevNet SD-WAN Sandboxes
https://developer.cisco.com/sdwan/sandbox

Cisco dCloud 
https://dcloud.cisco.com/

*Partner-level access might be needed for some labs.

SD-WAN Mastery Collection
https://digital-learning.cisco.com/#/course/60680

Implementing Cisco SD-WAN Solutions (SDWAN300) v1.0
https://www.cisco.com/c/en/us/training-events/training-certifications/training/training-services/courses/implementing-cisco-sd-wan-solutions-sdwan300.html

Regards,

G.

[dablais]

Hi,

  There is also a course that you can follow.  All the detail regarding the course are available at the following link: https://www.cisco.com/c/dam/en_us/training-events/training-services/course-overviews/sdwan300.pdf

Thanks,

Danny

[lemontree_61089]

Hello,

Is it possible to use Anyconnect with Cisco SD-WAN?

Kind regards,

Thomas

[Guilherme Lyra]

Hello Thomas,

Unfortunately it is not supported at this moment.

Best regards,

G.

[lemontree_61089]

Thanks. At this time, I believe there is no client VPN solution with Cisco SD-WAN. It is something on the roadmap or not at all?

Use case would be to use a client VPN software to connect to the SD-WAN fabric when it is too expensive to chip a small SD-WAN router to all your employes.

[Guilherme Lyra]

Hi,

There's no public roadmap for client VPN support at this point.
However, if desired, you could use an existing Cisco Firewall in your network as a client VPN concentrator and create a transit network with the SD-WAN WAN Edges in your data center for example.

Regards.

[Yanli Sun]

Does Cisco SD-WAN improve my Office 365 connectivity ?

Note: This question is the translation of a post originally created in Chinese by alina_xiao.  It was translated by the Cisco Community to share the query and its solution in different languages.

[Osvaldo Salazar Tovar]

• Enterprises can leverage Cisco’s Cloud OnRamp for SaaS capabilities to intelligently route Microsoft 365 traffic, providing a fast, secure, and reliable end-user experience.

• Cloud OnRamp for SaaS provides network administrators superior real-time and historical visibility into application performance through a quality-of-experience metric.

• All paths to Microsoft 365 from each circuit at the branch, regional hub, and data center will be monitored continuously for performance, and the application traffic will be dynamically routed to the best-performing path without requiring human intervention.

• Cloud OnRamp for SaaS provides network administrators superior real-time and historical visibility into application performance through a quality-of-experience metric.

• Cisco SD-WAN technology enables enterprises to build a scalable and carrier-neutral WAN infrastructure, allowing them to reduce WAN transport costs and network operational expenses.

• Cisco SD-WAN enables customers to apply business-centric, application-aware, and differentiated routing policies – providing end users at the branch direct connectivity to performance-intensive trusted applications, such as Microsoft 365, while routing generic Internet traffic via SWGs, CASBs, or the customer’s data center.

Below link for your information,

https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/sd-wan/white_paper-c11-741353.html

[Modérateur Cisco]

Good evening,

What type of DNA licenses do you have? How should I choose one to achieve my SD-WAN network goals?

Thank you very much, Alain.

* This is a question posted in French by DC010. It has been translated by Cisco Community to share the inquiry and its solution in different languages.

[Osvaldo Salazar Tovar]

Hi Alain,

There are three main license tiers that adjust to customers’ requirements, DNA Essentials with simplified management and security from one single pane of glass, DNA Advantage with unlimited segmentation, cloud deployment models and rich analytics add-on, and DNA Premier with all contained features in Essentials and Advantage but with advanced cloud delivered security.
For more details check: https://www.cisco.com/c/en/us/products/software/dna-subscription-wan/index.html 

Hope it helps, regards.

[Cisco Moderador]

QQ, Can Cisco SD-WAN control and management be instantiated on-premise?

Note: This question is the translation of a post originally created in Portuguese by Dani Ma. It was translated by the Cisco Community to share the query and its solution in different languages.

[Guilherme Lyra]

Hi,

Yes it's possible to have the controllers (vBond, vSmart, vManage) running on-premises. However, in this case, you will be responsible for the whole provisioning process, backups and disaster recovery. I suggest taking a look at the On-Premise Controller Deployment topic on the Design Guide:

https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-design-guide.html#OnPremiseControllerDeployment

Regards.

[Osvaldo Salazar Tovar]

Of course. Compared to cloud hosted option, Cisco SD-WAN gives you the flexibility of having controllers on main public cloud providers or virtualized in your own DC. For detailed server requirements for on-premise take a look at:
https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/hardware-and-software-installation.html#c_Server_Hardware_Recommendations_7477.xml

Note: Take into account that on-prem virtualization gives you the total ownership of creation, maintenance, operation compared to cloud hosted options.

[CiscoJapanModerator]

Does SD-WAN license (L-LIC-DNA-ADD) include the permission to download vManage, vSmart and vBond software from download software site?  I would like to download SD-WAN softwares for my repro work.

Note: This question is the translation of a post originally created in Japanese by Yoshiyuki Yamada.  It was translated by the Cisco Community to share the query and its solution in different languages.

[Guilherme Lyra]

Hello,

The part-number you mentioned (L-LIC-DNA-ADD) is a top-level SKU used when purchasing what Cisco calls DNA for Routing.

DNA for Routing is a subscription license that entitles your organization to have a specific SD-WAN Router instance running. This license is associated in your Cisco Smart Account.

The DNA for Routing license also entitles you to have SD-WAN controllers instantiated in Cisco's Cloud, in other words Cisco will host your controllers (vBond, vSmart and vManage) if you want to have them running on cloud.

With Cisco DNA software licenses, your organization also receives embedded SWSS, which covers 24x7x365 Cisco Technical Assistance Center (TAC) support, software release updates, advanced support analytics, and designated service management.

With this in mind, when you are configuring your vManage (cloud or on-prem instance), at some point you will need to either sync it with your Smart Account or manually upload a file with your WAN Edge list.

So, to sum it up, what you need is a DNA for Routing license for every router (physical or virtual) that will be part of your SD-WAN fabric.

Hope this helps.

Best regards.