SDWAN DTLS Connections

[Ariyarathna]

When I remove tunnel interface of vManage or vSmart DTLS connection is down.DTLS connection only form when I recreate the tunnel interface on vManage or vSmart.Please help me to understand why it behave like that? what is the requirement to have tunnel to form DTLS connection.

But in the vBond even I remove the tunnel interface DTLS connection is up.

[svemulap@cisco.com · Accepted solution]

Hi Ariyarathna -

This is expected behavior with the SDWAN solution.
To be more precise, tunnel interface is needed for establishing the control connection (either TLS or DTLS)
For vBond, tunnel interface is not required, but recommended after the certificate is installed.
Check out the Design Guide, which has good information.
https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-design-guide.html?dtid=osscdc000283

Hope it helps.

[Ariyarathna]

Hi , Thank you verymuch for the explanation