300-415 Question 108
Select 3An organization is deploying Cisco SD-WAN and has chosen to implement a centralized control plane. They need to deploy WAN Edge devices at their branch locations to establish secure communication with the data center and cloud applications. Which of the following deployment considerations must be met for a successful WAN Edge deployment?
- A
Ensure that each WAN Edge device is onboarded and authenticated with the vManage controller using certificates.
- B
Configure OSPF or BGP on the WAN Edge device to communicate directly with the vSmart controller.
- C
Verify that the WAN Edge device has at least two WAN transport interfaces for redundancy.
- D
Deploy a WAN Edge device with a minimum of 2 GB of RAM to meet performance requirements.
- E
Establish connectivity between the WAN Edge device and the vBond orchestrator for initial device authentication.
Show answer and explanation
Correct answers: A, C, E
Explanation
Successful WAN Edge deployment in a Cisco SD-WAN environment requires establishing secure communication with the SD-WAN controllers. This involves onboarding the device using certificates, ensuring redundancy with multiple WAN transports, and initially connecting to the vBond orchestrator for authentication and overlay information. These steps ensure the WAN Edge device is properly integrated into the SD-WAN fabric.
- A. Correct.
Correct. WAN Edge devices must be onboarded and authenticated using certificates to ensure secure communication with the SD-WAN controllers.
- B. Incorrect.
Incorrect. The WAN Edge does not directly use OSPF or BGP to communicate with the vSmart controller. Instead, it uses DTLS/TLS tunnels, and dynamic routing protocols like OSPF/BGP are used for local LAN/WAN connectivity.
- C. Correct.
Correct. Having at least two WAN transport interfaces is a best practice for redundancy and high availability in SD-WAN deployments.
- D. Incorrect.
Incorrect. While hardware resources like RAM are important, Cisco typically recommends higher RAM (e.g., 4 GB or more) for most WAN Edge devices, depending on performance needs.
- E. Correct.
Correct. The WAN Edge device must establish communication with the vBond orchestrator during the initial onboarding phase to authenticate and receive information about the SD-WAN overlay.