WHAT YOU’LL LEARN IN THIS COURSE

The SDWAN300: Cisco SD-WAN Training Online course gives you deep-dive training about how to design, deploy, configure, and manage your Cisco® Software-Defined WAN (SD-WAN) solution in a large-scale live network, including how to migrate from legacy WAN to SD-WAN. You will learn best practices for configuring routing protocols in the data center and the branch, as well as how to implement advanced control, data, and application-aware policies. The course also covers SD-WAN deployment and migration options, placement of controllers, how to deploy and replace edge devices, and how to configure Direct Internet Access (DIA) breakout.

This course helps you prepare to take the Implementing Cisco SD-WAN Solutions (300-415 ENSDWI) exam, which is part of the new CCNP Enterprise certification and the Cisco Certified Specialist - Enterprise SD-WAN Implementation certification.

COURSE DURATION

This course consists of 13 sections, hands-on demonstration, assessments, and video lectures. This self-study is a 30 Hours video lecture course.

WHO SHOULD ENROL?

• System installers
• System integrators
• System administrators
• Network administrators
• Solution designers

OBJECTIVES

After taking this course, you should be able to:

• Describe the Cisco SD-WAN overlay network and how modes of operation differ in legacy WAN versus SD-WAN
• Describe options for SD-WAN cloud and on-premises deployments, as well as how to deploy virtual vEdge and physical cEdge devices with Zero Touch Provisioning (ZTP) and device templates
• Describe best practices in WAN routing protocols, as well as how to configure and implement transport-side connectivity, service-side routing, interoperability, and redundancy and high availability
• Describe dynamic routing protocols and best practices in an SD-WAN environment, transport-side connectivity, service-side connectivity, and how redundancy and high availability are achieved in SD-WAN environments
• Explain how to migrate from legacy WAN to Cisco SD-WAN, including typical scenarios for data center and branch
• Explain how to perform SD-WAN operations, such as monitoring, reporting, logging, and upgrading

PREREQUISITES

You should have the following knowledge and skills before attending this course:

• Completion of the Cisco SD-WAN Operation and Deployment (ENSDW) course or equivalent experience
• Knowledge of software-defined networking (SDN) concepts as applied to large-scale live network deployments
• Strong understanding of enterprise-wide area network design
• Strong understanding of routing protocol operation, including both interior and exterior routing protocol operation
• Familiarity with Transport Layer Security (TLS) and IP Security (IPSec)

OUTLINE:

• SD-WAN Architecture
• Traditional WAN – Challenges
• SD-WAN Overview and definitions
• SD-WAN Benefits
• SD-WAN Key Concepts
• SD-WAN Main Components
• Describe Cisco SD-WAN Architecture and Components
• Orchestration plane (vBond, NAT)
• Management plane (vManage)
• Control plane (vSmart, OMP)
• Data plane (vEdge)
• TLOC
• IPsec
• vRoute
• BFD
• Describe WAN Edge platform types, capabilities (vEdges, cEdges)
• SD-WAN Controller Deployment
• Describe controller cloud deployment
• Describe Controller on-Prem Deployment
• Hosting platform (KVM/Hypervisor)
• Installing controllers
• Scalability and redundancy
• Configure and verify certificates and whitelisting
• Troubleshoot control-plane connectivity between controllers
• Router Deployment
• Describe WAN Edge deployment
• On-boarding
• Orchestration with zero-touch provisioning/plug-and-play
• Single/multi data center/regional hub deployments
• Configure and verify SD-WAN data plane
• Circuit termination/TLOC-extension
• Underlay-overlay connectivity
• Configure and verify OMP
• Configure and verify TLOCs
• Configure and verify CLI and vManage feature configuration templates
• VRRP
• OSPF
• BGP
• Policies
• Configure and verify control policies
• Configure and verify data policies
• Configure and verify end-to-end segmentation
• VPN segmentation
• Topologies
• Configure and verify SD-WAN application-aware routing
• Configure and verify direct Internet access
• Security and Quality of Service
• Configure and verify service insertion
• Describe application-aware firewall
• Configure and verify QoS treatment on WAN edge routers
• Scheduling
• Queuing
• Shaping
• Policing
• Management and Operations
• Describe monitoring and reporting from vManage
• Configure and verify monitoring and reporting
• Describe REST API monitoring
• Describe software upgrade from vManage

LAB OUTLINE

Our Lab sessions focus on practical aspects for Implementing & Troubleshooting SD-WAN operation of:

• Lab 01 – Interconnecting the SD-WAN components
• Lab 02 – Installing the enterprise root CA server
• Lab 03 – Performing initial configurations on vManage via CLI
• Lab 04 – Exploring vManage GUI mode
• Lab 05 – Performing initial configurations on vBond via CLI
• Lab 06 – Registering and installing a certificate for vBond in vManage
• Lab 07 – Performing initial configurations on vSmart via CLI
• Lab 08 – Registering and installing a certificate for vSmart in vManage
• Lab 09 – Performing initial configurations on vEdge via CLI
• Lab 10 – Registering vEdges devices in vManage
• Lab 11 – Performing initial configurations on cEdge via CLI
• Lab 12 – Registering cEdges devices in vManage
• Lab 13 – Configuring System template
• Lab 14 – Configuring Banner template
• Lab 15 – Configuring VPN 0 and VPN 512 templates
• Lab 16 – Configuring VPN 0 interface and VPN 512 interface templates
• Lab 17 – Configuring AAA, BFD and OMP templates
• Lab 18 – Configuring device template from various feature templates
• Lab 19 – Adding service-side VPNs in sites using CLI and template
• Lab 20 – Configuring static routing using CLI
• Lab 21 – Configuring OSPF routing using CLI
• Lab 22 – Configuring BGP routing using CLI
• Lab 23 – Configuring routing using templates in vManage GUI
• Lab 24 – Attaching routing feature template in the device template
• Lab 25 – Verifying the reachability between sites using CLI and vManage
• Lab 26 – Configure TLOC extension for site redundancy
• Lab 27 – Configure an arbitrary hub-n-spoke topology for a VPN
• Lab 28 – Create a control policy for traffic engineering using TLCOs
• Lab 29 – Configuring a policy for firewall service insertion
• Lab 30 – Perform route-filtering for sites using control policy
• Lab 31 – Configuring route-leaking between VPNs for shared services
• Lab 32 – Create a data policy to set preferred transport for certain traffic
• Lab 33 – Implementing application-aware firewall policy for traffic
• Lab 34 – Creating a ZBF policy to inspect interesting traffic
• Lab 35 – Implementing application-aware policies for real-time traffic
• Lab 36 – Configuring vEdges with NAT and direct internet access
• Lab 37 – Configuring various QoS concepts using data policy
• Lab 38 – Using vManage GUI to explore various monitoring feature
• Lab 39 – Verifying Syslog and tcpdump on vEdge devices
• Lab 40 – Using API docs to create a REST API call to query vManage
• Lab 41 – Performing software upgrade for controllers and edge devices