300-415 Question 10
Single answerAn enterprise is deploying a Cisco SD-WAN solution and has multiple branch routers behind NAT devices. The network administrator wants to ensure that these devices can establish secure control connections with the controllers. What role does the vBond orchestrator play in this scenario?
- A
vBond orchestrates NAT traversal by facilitating initial communication between SD-WAN devices and controllers.
- B
vBond provides a centralized database of NAT mappings for all SD-WAN devices.
- C
vBond ensures data plane encryption between SD-WAN routers and controllers.
- D
vBond serves as a permanent intermediary for all control plane traffic between SD-WAN devices and controllers.
Show answer and explanation
Correct answer: A
Explanation
The vBond orchestrator is an essential component of the orchestration plane in a Cisco SD-WAN deployment. Its primary role is to assist with NAT traversal and to facilitate the initial secure communication between SD-WAN devices and controllers (vSmart and vManage). After the initial connection is established, the vBond's role is complete, and it does not serve as a permanent intermediary or handle data plane encryption.
- A. Correct.
Correct. vBond orchestrates NAT traversal by helping SD-WAN devices establish initial control connections with the other controllers (vSmart and vManage). It plays a critical role in ensuring connectivity, especially for devices behind NAT.
- B. Incorrect.
Incorrect. vBond does not maintain a centralized database of NAT mappings. Instead, it facilitates the initial NAT traversal and provides information needed for devices to connect to controllers.
- C. Incorrect.
Incorrect. While vBond plays a role in the control plane, it does not handle data plane encryption. Data plane encryption is handled by the SD-WAN routers themselves using IPsec tunnels.
- D. Incorrect.
Incorrect. vBond is not a permanent intermediary; its role is to establish initial connections. Once secure connections are formed, traffic flows directly between SD-WAN devices and controllers.