300-415 Question 111
Single answerA network engineer is deploying a new Cisco SD-WAN branch router and needs to onboard it using Zero-Touch Provisioning (ZTP). The engineer ensures that the router has internet connectivity but notices that the device fails to register with the vManage controller. Which of the following could be the most likely cause of the failure during the ZTP process?
- A
The device does not have a valid root certificate installed.
- B
The ZTP process requires manual IP address configuration on the router.
- C
The vManage controller is using an incorrect Organization Name.
- D
The router's serial number is not whitelisted in the vManage configuration.
Show answer and explanation
Correct answer: D
Explanation
The ZTP process for Cisco SD-WAN requires that the router's serial number is pre-registered in the vManage controller to verify authenticity during onboarding. If the serial number is not whitelisted, the device cannot complete the ZTP process, even if other configurations like internet connectivity and certificates are correct.
- A. Incorrect.
The ZTP process verifies the authenticity of the router by using a root certificate pre-installed on the device. While a missing root certificate could cause issues, this is unlikely since Cisco devices come with a default root certificate for ZTP.
- B. Incorrect.
ZTP automates the provisioning process and does not require manual IP address configuration on the router. Internet connectivity is enough for the process to begin.
- C. Incorrect.
The Organization Name configured in the vManage controller must match the one used during the SD-WAN setup. However, an incorrect Organization Name would typically cause issues after the device has already communicated with vManage, not during the initial ZTP process.
- D. Correct.
The router's serial number must be pre-registered (whitelisted) in the vManage controller to establish trust during the ZTP process. If the serial number is missing, the onboarding process will fail.