#CLUS

Next-Gen SD-WAN
(Viptela)
Deployment, Monitoring, and
Troubleshooting
Ali Shaikh
Technical Solutions Architect
BRKRST-2093

#CLUS
Agenda
• Introduction
• Bringup
• Setup
• Deploy
• Monitor
• Conclusion

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 3
Cisco Webex Teams
Questions?
Use Cisco Webex Teams to chat
with the speaker after the session

How
1 Find this session in the Cisco Live Mobile App
2 Click “Join the Discussion”
3 Install Webex Teams or go directly to the team space
4 Enter messages/questions in the team space

Webex Teams will be moderated cs.co/ciscolivebot#BRKRST-2093

by the speaker until June 16, 2019.

#CLUS © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 4
Overview
SDWAN Components Overview
vManage
NMS

vSmart
WAN Edge
Controller
Cloud Router

SDWAN
Components

vBond
WAN Edge Orchestrator
Router

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
SDWAN Components Overview
Management Plane Management Plane
vManage
Cisco vManage

 Policies and Templates

vBond  Troubleshooting and

Monitoring
vSmart Controllers
 Programmatic interfaces
MPLS 4G

INET
vEdge Routers

Cloud Data Centre Campus Branch SOHO

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 7
SDWAN Components Overview
Orchestration Plane Orchestration Plane
vManage
Cisco vBond

 Orchestrates Connectivity

vBond  First point of authentication

vSmart Controllers  Facilitates NAT traversal

MPLS 4G

INET
vEdge Routers

Cloud Data Centre Campus Branch SOHO

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
SDWAN Components Overview
Control Plane Control Plane
vManage
Cisco vSmart

 Handles overlay routing

 Facilitates encryption between
vBond
vEdges
vSmart Controllers
 Propagates policies for handling

MPLS 4G traffic
INET
vEdge Routers

Cloud Data Centre Campus Branch SOHO

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 9
SDWAN Components Overview Data Plane
Physical/Virtual
Data Plane
vManage
vEdge vEdge Cloud

 WAN Edge router

 Secure data plane with other

vBond
vEdge routers
vSmart Controllers
 Implements data plane policies

MPLS 4G

INET
vEdge Routers

Cloud Data Centre Campus Branch SOHO

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 10
Delivering a Cloud-Ready architecture
Cloud
Data Centre
Secure
vManage vSmart
SD-WAN Fabric

Private/Hosted/Managed
Cloud
Data Centre
MPLS 4G

INET
Secure
Control Plane
Small Office
Home Office
Edge Router Campus

Branch
#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 11
 Building the overlay fabric
OMP Update:
vSmart Reachability – Routes, TLOCs
OMP
Security – Encryption Keys
DTLS/TLS Tunnel
Policy – Data/Application-Aware Policies
IPSec Tunnel
OMP OMP
BFD Update Update
Policies
OMP OMP
Update Update

vEdge vEdge
Transport1
TLOCs TLOCs

VPN1 VPN2 Transport2 VPN1 VPN2

BGP, OSPF, BGP, OSPF,
Connected, Connected,
Static A B C D Static

Subnets Subnets
#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 12
Bringup
Configure administrative settings

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 14
Add controller devices

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 15
Generate controller certificates

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 16
Add vEdge devices

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 17
Control vEdge Whitelist

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 18
Failure Scenarios
Connectivity Issues Certificate Issues

 DTLS connection failure  Device(s) not added

 TLOC disabled  Certificate revoked/invalidated

 Transient conditions  Certificate verification failures

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 19
Checking Control Connections
 Control Up: Total number of
devices with the required number
of operational control plane
connections to a vSmart
controller.

 Partial: Total number of devices

with some, but not all, operational
control plane connections to
vSmart controllers.

 Control Down: Total number of

devices with no control plane
connection to a vSmart controller.

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 20
Setup
Defining the objects

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 22
Building the topology

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 23
Defining the treatment of applications

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 24
Activating the policies

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 25
Failure Scenarios
Control Plane Issues Data Plane Issues

 Incorrect routing  Incorrect path taken

 Tunnels not established  SLA Violations

 Best path selection  Application specific requirements

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 26
Troubleshooting Routing

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 27
Troubleshooting Traffic

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 28
Visualizing Application Paths

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 29
Simulating Traffic Flows

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 30
Deploy
Building the template

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 32
Deploying the template

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 33
Adding device values

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 34
Validation of Configuration

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 35
Configuration Rollback

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 36
Zero Touch Provisioning
Control and Policy
Zero Touch Provisioning
Elements
Service

2 3
5
1 Full Registration and
Configuration
4

DHCP on Transport Side (WAN)

vEdge

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 37
Checking Device Bring-Up

- Indicates control plane connections are successful

- Indicates ZTP is disabled. Seen during SW upgrade only

- Indicates control plane connection failure

- Indicates that the reason for device bring-up failure is

Unknown

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 38
Failure Scenarios
Connectivity Loss Unsupported Behavior

 Accidental misconfiguration  Bad data

 Interfaces shutdown  Unsupported configuration

 Incorrect addressing  Conflicting information

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 39
Troubleshooting Configuration

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 40
Monitor
Checking System Status

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 42
Checking Interface Utilization

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 43
Checking Transport Quality

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 44
Checking Events

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 45
REST API

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 46
REST API

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 47
REST API

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 48
Summary
• Step 1: Bring up infrastructure and inventory management
• System – Dynamic orchestration of TLS connections to establish the control plane
• User – Be able to troubleshoot IP connectivity and SSL certificate messages
• Step 2: Centralized routing and application policies
• System – vSmart controllers handle routing updates and IPsec information
• User – Be able to read OMP tables and traffic simulation tools
• Step 3: Centralized device configurations through device templates
• System – vManage pushes configurations to devices directly
• User – Be able to read build templates and read template XML messages
• Step 4: APIs and programmability
• System – vManage provides a REST interface to control the overlay
• User – Be able to create custom automations and integrations

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 49
Complete your
online session • Please complete your session survey
evaluation after each session. Your feedback
is very important.
• Complete a minimum of 4 session
surveys and the Overall Conference
survey (starting on Thursday) to
receive your Cisco Live water bottle.
• All surveys can be taken in the Cisco Live
Mobile App or by logging in to the Session
Catalog on ciscolive.cisco.com/us.
Cisco Live sessions will be available for viewing
on demand after the event at ciscolive.cisco.com.

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 50
Continue your education

Demos in the
Walk-in labs
Cisco campus

Meet the engineer

Related sessions
1:1 meetings

#CLUS BRKRST-2093 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 51
Thank you

#CLUS
#CLUS