300-415 Question 112
Select 3An organization is deploying Cisco SD-WAN and wants to onboard a new branch router using the Zero Touch Provisioning (ZTP) process. During the onboarding, the branch router fails to establish a connection with the Cisco vManage controller. Which of the following could be the reason for this failure?
- A
The router's serial number and chassis ID are not registered in the Cisco vManage database.
- B
The router does not have a valid configuration file in its flash memory.
- C
The router cannot resolve the ZTP server's URL due to DNS issues.
- D
The router is behind a firewall that blocks outbound HTTPS traffic.
- E
The router's bootstrap configuration is using an incorrect IP address for the vSmart controller.
Show answer and explanation
Correct answers: A, C, D
Explanation
Zero Touch Provisioning (ZTP) is designed to simplify the onboarding of SD-WAN routers. For ZTP to work, the router must be able to contact the Cisco ZTP server via HTTPS, which requires proper DNS resolution and an unblocked outbound HTTPS connection. Additionally, the router's serial number and chassis ID must be registered in the Cisco vManage database to ensure the device is authorized. Configuration files or bootstrap settings are not required for ZTP, as the process dynamically provisions the device.
- A. Correct.
Correct - For ZTP to succeed, the router's serial number and chassis ID must be pre-registered in the Cisco vManage database. If they are missing, the ZTP process will fail.
- B. Incorrect.
Incorrect - ZTP does not require a pre-existing configuration file on the router because the process provisions the configuration dynamically.
- C. Correct.
Correct - DNS resolution is necessary for the router to contact the ZTP server. If there are DNS issues, the ZTP process cannot proceed.
- D. Correct.
Correct - ZTP requires outbound HTTPS traffic to reach the ZTP server. If a firewall blocks this traffic, the onboarding process will fail.
- E. Incorrect.
Incorrect - While the bootstrap configuration is relevant in certain manual onboarding scenarios, ZTP does not rely on a preconfigured vSmart IP address. Instead, ZTP dynamically provisions these settings.