300-415 Question 100
Single answerA branch router in a Cisco SD-WAN deployment is unable to establish a control connection with the vSmart controller. You verify that the device is configured correctly and the transport interfaces are operational. Which step should you take next to troubleshoot the control plane connectivity?
- A
Verify that the vSmart controller's certificate is valid and not expired.
- B
Check if the OMP (Overlay Management Protocol) session between the branch and vSmart is established.
- C
Ensure that the branch router's TLOC (Transport Locator) configuration matches the vSmart controller's settings.
- D
Inspect the whitelist configuration on the vManage to ensure the branch router is authorized.
Show answer and explanation
Correct answer: A
Explanation
In Cisco SD-WAN, control plane connectivity issues are often related to certificate validation. Ensuring the vSmart controller's certificate is valid is a critical step in troubleshooting control plane connectivity. Without a valid certificate, secure DTLS/TLS connections cannot be established between devices, and the control plane will fail.
- A. Correct.
This is the correct step because an invalid or expired certificate on the vSmart controller can prevent secure control connections from being established. Certificates are a critical part of SD-WAN control plane connectivity.
- B. Incorrect.
Checking the OMP session is not the next logical step because OMP sessions are established only after the control connection is successfully set up.
- C. Incorrect.
The TLOC configuration is not directly relevant to the control connection between the branch router and vSmart. TLOCs are used for data plane traffic routing.
- D. Incorrect.
The whitelist configuration on the vManage is not directly involved in establishing control connections with the vSmart controller. The vManage whitelist is used for device authorization during onboarding.