Installing, Configuring, Monitoring and Troubleshooting Cisco Catalyst SD-WAN (SDWAN) V2.0

This five-day hands-on instructor-led course offers comprehensive training on Cisco Catalyst (Viptela) SD-WAN, focusing on the 20.12 release for SD-WAN and the 17.12 release for IOS-XE, explicitly designed for Network professionals. Throughout the course, participants will gain hands-on experience with the administration and configuration of SD-WAN Controllers and Cisco IOS-XE devices.

Cisco Catalyst SD-WAN Overview:

• Learn about the fundamentals of Cisco Catalyst SD-WAN, focusing on centralized control, connectivity, performance optimization, and security features like Zero-Touch Provisioning, direct cloud access, and application-aware routing.

Deployment and Configuration of SD-WAN Controllers:

• Understand how to deploy, manage, and upgrade SD-WAN Controllers (vManage, vSmart, and vBond) on cloud services or on-premise servers.

Router Configuration and Management:

• Master the deployment and management of IOS-XE routers using templates and configuration groups, focusing on the Cisco Catalyst 8000 Series Edge Platforms and ISR 4000 Series.

SD-WAN Fabric Optimization:

• Learn to deploy the SD-WAN fabric using Overlay Management Protocol (OMP) and understand the importance of Transport Location (TLOC) for maintaining the network overlay.

Upgrading the Catalyst SD-WAN Network:

• Gain skills in planning and executing network upgrades, including backup procedures, version compatibility management, and troubleshooting issues during upgrades.

Feature and Device Templates:

• Explore the creation and management of Feature and Device Templates within the SD-WAN architecture to standardize and simplify network device configurations.

Configuration Groups:

• Learn to create and manage Configuration Groups in vManage, applying configurations to multiple devices for streamlined network management.

Deploying Network QoS:

• Understand and deploy SD-AVC, dynamic bandwidth allocation, Forward Error Correction (FEC), and packet duplication to enhance network performance and reliability.

Security and Cloud Security:

• Dive into Cisco's multi-layered security strategy, including integrated security features, Zero Trust models, and Cloud Security with SASE, tailored for networks.

Local and Central Policy Implementation:

• Learn to create and manage local and central policies, including traffic routing, application prioritization, and security enforcement within the SD-WAN environment.

Cloud On-RAMP:

• Explore Cloud OnRamp services, including optimizing SaaS performance and extending SD-WAN to IaaS providers like AWS, Azure, and Google Cloud.

Monitoring and Troubleshooting Catalyst SD-WAN:

• Master network monitoring and troubleshooting techniques using vManage, including real-time data analysis, diagnostics, and performance optimization.

Hands-On Labs:

• Practical labs include deploying and upgrading IOS-XE routers, configuring CLI Templates, Device Templates, Configuration Groups, and implementing various SD-WAN policies.

• Cisco Catalyst SD-WAN Overview
• Deployment and Configuration of SD-WAN Controllers
• Router Configuration and Management
• SD-WAN Fabric Optimization
• Upgrading the Catalyst SD-WAN Network
• Feature and Device Templates
• Configuration Groups
• Deploying Network QoS
• Security and Cloud Security
• Local Policy Implementation and Mangement
• Central Policy Implementation and Management
• Cloud On-RAMP
• Monitoring and Troubleshooting Catalyst SD-WAN

Who should sit this course?

This course is suitable for Network Engineers, System Administrators, IT Professionals, Technical Support Staff, and Cisco-Certified Professionals looking to enhance their skills and proficiency with Cisco Catalyst SD-WAN network management tailored for networks. 

The course is highly recommended for:

• Network Engineers: Professionals tasked with the design, implementation, and maintenance of the network infrastructure. This includes managing both Catalyst SD-WAN and data communication systems, ensuring they meet the high standards required for government operations.
• System Administrators: Individuals responsible for the daily management and configuration of the network systems. Their role is crucial in ensuring the reliable operation of Catalyst SD-WAN and WAN services across various departments.
• IT Professionals: This group includes a wide range of IT personnel working who require a robust understanding of secure and reliable Catalyst SD-WAN network systems. Their work is critical in ensuring that these networks comply with stringent standards and regulations.
• Technical Support Staff: These are the frontline personnel who provide essential technical support for Catalyst SD-WAN network systems within the environments. Their expertise ensures that any issues are promptly resolved to maintain network integrity and security.
• Cisco Certified Professionals: Individuals who have already achieved Cisco certifications and are looking to further their knowledge and expertise specifically in Catalyst SD-WAN Networks and Technologies. This course offers them an opportunity to specialize in Catalyst SD-WAN solutions, enhancing their skill set in the context of the network requirements.

N/A

Module 0: Introductions

Module 1: Catalyst SD-WAN (Viptela) Platform Overview

• Module Topics
• Lesson 1: SD-WAN WAN Architecture Overview
• Lesson 2: Cisco SD-WAN Solution Overview
• Lesson 3: New Features by Version
• Lesson 4: Licensing for Cisco SD-WAN
• Lesson 5: SD Routing Overview (20.12)
• Module Summary

Module 2: Cisco SD-WAN Controllers 

• Module Topics
• Lesson 1: Cisco SD-WAN Controller Architecture
• Lesson 2: Cisco Catalyst SD-WAN Portal
• Lesson 3: Multitenant Tenancy
• Lesson 4: Controller High Availability
• Lesson 5: Verify Control Plane
• Module Summary

Module 3: Cisco SD-WAN Allow Lists and Certificates

• Module Topics
• Lesson 1: Certificate Fundamentals
• Lesson 2: SD-WAN Certificates
• Lesson 3: Certificate Configuration
• Lesson 4: Certificate Validity
• Lesson 5: Monitoring and Troubleshooting Certificates
• Module Summary

Module 4: Catalyst SD-WAN Platforms

• Module Topics
• Lesson 1: SD-WAN Platform Overview
• Lesson 2: SD-WAN vEdge Platforms
• Lesson 3: SD-WAN Industrial Router Portfolio
• Lesson 4: SD-WAN ISR 1000/1100 Series Routers
• Lesson 5: Cisco ISR 4000 Series Routers
• Lesson 6: Cisco ASR 1000 Routing Portfolio
• Lesson 7: Catalyst 8000 Series Router Overviews
• Lesson 8: Catalyst 8500 Series Routers
• Lesson 9: Catalyst 8300 Series Routers
• Lesson 10: Catalyst 8200 Series Routers
• Lesson 11: Catalyst 8000v Series Virtual Router
• Lesson 12: Catalyst 8000 SD-WAN Supported Modules
• Lesson 13: Cellular Gateways for SDWAN
• Lesson 14: SD-WAN WAN Edge High Availability
• Module Summary

Module 5: Cisco SD-WAN WAN Edge Deployments        

• Module Topics
• Lesson 1: Adding Device to the PNP Portal
• Lesson 2: Device Initial Bootup and Image Selection
• Lesson 3: SD-WAN Zero Touch Provisioning
• Lesson 4: SD-WAN Quick Connect
• Lesson 5: Manually Provision SD-WAN IOS-XE
• Lesson 6: Verifying SD-WAN WAN Edge Configuration
• Module Summary

Module 6: Configuring SD-WAN Manager

• Module Topics
• Lesson 1: Dashboard Overview and Changes
• Lesson 2: SD-Wan Manager Monitoring Dashboard
• Lesson 3: SD-WAN Manager Configuration
• Lesson 4: SD-WN Manager Tools
• Lesson 5: SD-WAN Manager Maintenance
• Lesson 6: Administrative Settings
• Lesson 7: Resource Groups
• Lesson 8: Users and Groups
• Lesson 9: RADIUS and TACACS
• Lesson 10: Single Sign-On / IDP Management
• Lesson 11: License Management
• Lesson 12: Network Wide Path Insight
• Module Summary

Module 7: SD-WAN Software Upgrades

• Module Topics
• Lesson 1: Upgrading the SD-WAN Environment
• Lesson 2: Upgrade SD-WAN Controllers
• Lesson 3: Software Upgrade Workflow Version 20.10 / 17.10
• Lesson 4: Upgrading Devices via CLI
• Module Summary

Module 8: SD-WAN OMP/Fabric

• Module Topics
• Lesson 1: SD-WAN Fabric Overview and Terminology
• Lesson 2: SD-WAN Segmentation
• Lesson 3: OMP / TLOCs / Routes
• Lesson 4: SD-WAN BFD
• Lesson 5: On-Demand Tunnels
• Lesson 6: SD-WAN Fabric Verification
• Module Summary

Module 9: SD-WAN QoS / QoE

• Module Topics
• Lesson 1: QoE / QoS Challenges
• Lesson 2: Quality of Experience (QoE) / Quality of Service (QoS)
• Lesson 3: Per-Tunnel QoS
• Lesson 4: Adaptive QoS
• Lesson 5: Per VPN QoS
• Lesson 6: Application Quality of Experience (AppQoE)
• Lesson 7: Forward Error Correction (FEC) / Packet Duplication
• Lesson 8: TCP Optimization
• Lesson 9: Data Redundancy Elimination (DRE) / Lempel-Ziv Compression (LZ)
• Lesson 10: SD-AVC / Microsoft O365 Telemetry
• Module Summary

Module 10: SD-WAN Security / SASE

• Module Topics
• Lesson 1: Security Overview
• Lesson 2: Secure Access Service Edge (SASE)
• Lesson 3: SD-WAN Fabric Security
• Lesson 4: SD-WAN Security Options
• Lesson 5: SD-WAN Integrated Security
• Lesson 6: SD-WAN Security Configuration
• Lesson 7: Cisco Umbrella
• Module Summary

Module 11: Creating and Applying SD-WAN Templates

• Module Topics
• Lesson 1: Template Overview
• Lesson 2: Feature Templates
• Lesson 3: Device Templates
• Lesson 4: CLI Templates
• Lesson 5: Create Device Templates using Feature Templates
• Lesson 6: Attaching Devices to Templates
• Lesson 7: Configuration Groups Overview
• Lesson 8: Creating Configuration Groups
• Lesson 9: Deploy Configuration Group Workflow
• Lesson 10: View/Edit Configuration Groups
• Module Summary

Module 12: SD-WAN Local Policy

• Module Topics
• Lesson 1: Local Policy Overview
• Lesson 2: Local Policy Lists
• Lesson 3: Local Data Policies
• Lesson 4: Local Policy QoS Configuration
• Lesson 5: Access Control Lists
• Lesson 6: Localized Control Policy
• Lesson 7: Save and Apply Local Policy
• Module Summary

Module 13: SD-WAN Central Policies

• Module Topics
• Lesson 1: Central Policy Overview
• Lesson 2: Central Control Policy
• Lesson 3: Control Policy – Dis-contiguous Data Planes
• Lesson 4: Control Policy – Data Center Priority
• Lesson 5: Control Policy – VPN Topologies
• Lesson 6: Control Policy – VPN Membership Policy
• Lesson 7: Control Policy – Application-Aware Routing
• Lesson 8: Control Policy – Service Chaining
• Lesson 9: Central Data Policies
• Lesson 10: Central Data Policies – Use Cases
• Lesson 11: Central Data Policies - Cflowd
• Lesson 12: Creating Centralized Policies
• Module Summary

Module 14: Cisco SD-WAN with ThousandEyes Integration

• Module Topics
• Lesson 1: ThousandEyes Introduction
• Lesson 2: Architecture and SD-WAN Deployment
• Lesson 3: Troubleshooting ThousandEyes SD-WAN Deployments
• Module Summary

Module 15: Cloud Onramp for SaaS

• Module Topics
• Lesson 1: Cloud OnRamp - Overview
• Lesson 2: Cloud OnRamp for SaaS Overview
• Lesson 3: Cloud OnRamp for M365
• Lesson 4: Cloud OnRamp for Webex
• Lesson 5: Cloud OnRamp for Enterprise & Custom Apps
• Lesson 6: Cloud OnRamp for SaaS – Security
• Lesson 7: Deployment Use cases
• Lesson 8: Cloud OnRamp for SaaS Configuration
• Lesson 9: Cloud OnRamp for SaaS Monitoring
• Module Summary

Module 16: Analytics (vAnalytics) 3.0

• Module Topics
• Lesson 1: Analytics Overview
• Lesson 2: Analytics Dashboards
• Lesson 3: Analytics IDP Onboarding
• Lesson 4: Analytics KPIs and Scores
• Lesson 5: Cisco Analytics Troubleshooting
• Lesson 6: Analytics Onboarding & Access Workflow
• Module Summary

Module 17: Monitoring & Troubleshooting the SD-WAN Solution

• Module Topics
• Lesson 1: SD-WAN Troubleshooting Overview
• Lesson 2: SD-WAN Technical Support Access
• Lesson 3: Controller Failure Scenarios
• Lesson 4: Troubleshooting Controllers
• Lesson 5: Troubleshooting Control Connections
• Lesson 6: Typical Control Connection Issues
• Lesson 7: Troubleshooting Data Plane
• Lesson 8: Troubleshooting Routing
• Lesson 9: Centralized Policies Troubleshooting
• Lesson 10: Packet Forwarding Troubleshooting
• Lesson 11: Device Configuration and Upgrades Failure
• Lesson 12: vDiagnose - Diagnostic Tool for SD-WAN
• Lesson 13: Troubleshooting cEdge
• Lesson 14: Troubleshooting using SD-WAN Manager (vManager)
• Lesson 15: Device Troubleshooting
• Lesson 16: Using the GUI for cli show command Under Troubleshooting > Real-Time
• Lesson 17: CLI Troubleshooting
• Lesson 18: Netflow Collectors
• Lesson 19: SNMP Overview
• Lesson 20: SD-WAN Logs
• Lesson 21: SD-WAN Reporting
• Lesson 22: SD-WAN Manager (vManager), APIs & Programmability
• Module Summary

Appendix A: Deploying SD-WAN Controllers

• A: On-Prem Controller Deployment
• B: Create vManage VM Instance on ESXi or KVM (slide 6)
• Lesson 3: Initial vManage Setup (slide 30)
• Lesson 4: Create vBond VM Instance on ESXI or KVM (slide 44)
• Lesson 5: Create vSmart VM Instance on ESXI or KVM (slide 63)
• Lesson 6: Add Controllers to vManage (slide 81)
• Lesson 7: Enterprise CA Configuration (slide 87)
• Module Summary

LAB OUTLINE

Lab 1: Deploy the SD-WAN Controller

• Deploy the vManage Controllers
• Deploy the vBond Orchestrator
• Deploy the vSmart Controller
• Configure Certificate Settings

Lab 2: Deploy the vEdge, ISR 4K /C8000V Routers

• Deploy WAN Edges
• Configure the WAN Edge Routers
• Prepare vEdge Routers for ZTP

Lab 3: vManage Configuration

• Explore the Interface
• Add Controllers to the Whitelist
• Add vEdge whitelist
• BFD Tuning
• Create and Update Users
• Manage the Fabric

Lab 4-8: Creating Device Templates 

• Create CLI Policy Template
• Create Feature Policy Template
• Create vSmart Device CLI Template
• Create DC1 vEdges Device Feature Template
• Attach DC1 Devices to Template
• Create DC2 IOS-XE CSRs Device Feature Template
• Attach DC2 Devices to Template
• Create BR1 vEdges Device CLI Template using TLOC Extensions
• Attach BR1 Devices to Template
• Create BR2 IOS-XE CSRs Device Feature Template using TLOC Extensions
• Attach BR2 Devices to Template
• Create BR3 IOS-XE ISR4K Device Feature Template
• Attach BR3 Devices to Template
• Configuration Rollback

Lab 9: Use APIs to Import Feature Templates

Lab 10: Upgrade SDWAN Environment 

Lab 11-13: Perform ZTP on SDWAN Environment 

Lab 14-17: SDWAN Policies 

• List types of policies that can be implemented in the SD-WAN solution
• Describe how policies can be implemented that affect the control plane
• Describe what affect policies can have on data traffic forwarding
• Identify the various components of the vSmart policy architecture
• Describe how different policies are enabled in different devices
• Detail how policies are processed and applied
• Control Policy Lab
• Configure a Vpn-membership-policy
• Configure Site-list Selection Policies
• Configure a Service Chaining Policy
• Configure an Extranet VPN Policy
• Configure a Service path affinity Policy
• Configure Fabric Policies
• Configure Security Zones
• Data Policy Lab
  • Configure Shaping Policies
  • Configure QoS Policies
  • Configure a Service Chaining
  • Configure an Extranet VPN Policy
  • Configure Service path affinity Policy
  • Configure a NAT Policies for DIA
  • Configure an OSPF BGP Routing Policy
• Application Aware Routing Policy Lab
• SLA Classes
• Path Selection using Application Policies
• Create a cFlowd Policy
• Create a Local Control Policy
• Configure OSPF and BGP
• Create a Local Data Policy
• Create ACL
• Create Device Access Policy
• Configure QOS
• Configure OSPF Route Policy

Lab 18: Application Visibility

• Create a Centralized Policy for Application-Aware Routing
• Identify Application Groups (FTP/Office 365/Voice)
• Create Lists
• Site Lists
• Application Lists
• Data Prefix Lists
• VPN Lists
• Create a SLA Classes
• Create Traffic Rules
• Apply Policies to Sites and VPNs

Lab 19: Cloud On-RAMP 

• Configure Cloud Onramp for SAAS

Lab 20: Monitoring / Troubleshooting

• Explore vManage Dashboard analytics
• Monitor Applications
• Monitor Loss, Latency, and Jitter
• Monitor Individual Device
  • Check system Status
  • Check Control Connections
  • Check OMP Status
  • Check BFD Status
  • Check Interfaces for Issues
• Use the CLI to view and troubleshooting debug Logs
• Troubleshoot BFD
• Troubleshoot OMP
• Use troubleshooting tools to diagnose issues
  • Use the Ping tool
  • Use the Traceroute tool
  • Use the App Route Visualization
  • Simulate traffic flows
  • Take a Packet
• Troubleshoot Application Routing