- 1-to-1 is a best practice for controllers if they are behind NAT.- PAT would work fine.It is better if you can get an internet connection locally rather back-hauling. The problem with back-haul for control connections is, if you lose connection at ...
You can install either via vManage or directly on vSmart using "request root-cert install" command. Have a look at the below video for help.https://youtu.be/UJEgiUck9vA Thanks,Srikanth
You can just upgrade the routers to SD-WAN code. Follow the below URL. https://sdwan-docs.cisco.com/Product_Documentation/Getting_Started/Hardware_and_Software_Installation/Software_Installation_and_Upgrade_for_Cisco_IOS_XE_Routers Thanks,Srikanth