300-415 Question 130
Select 3An enterprise deploys a Cisco SD-WAN solution and observes that certain edge devices are unable to establish connectivity to the overlay network. Upon investigation, it is noted that the underlay network is misconfigured. Which of the following factors could prevent successful underlay-overlay connectivity in this scenario?
- A
Incorrect IP reachability between SD-WAN edge devices and vBond controllers
- B
Misconfigured BGP or OSPF routing in the underlay network
- C
TLS misconfiguration on the vSmart controllers
- D
Firewall blocking UDP port 12346 required for DTLS tunnel establishment
- E
Incorrect certificates installed on the SD-WAN edge devices
Show answer and explanation
Correct answers: A, B, D
Explanation
For the Cisco SD-WAN overlay network to function, the underlay network must provide proper IP reachability between SD-WAN components. This includes ensuring that routing protocols like BGP or OSPF are correctly configured, required ports (e.g., UDP 12346) are not blocked by firewalls, and edge devices can communicate with the vBond controllers. Issues such as TLS misconfiguration or incorrect certificates pertain more to secure communication and device authentication, not the fundamental underlay-overlay connectivity.
- A. Correct.
Correct. For the overlay network to connect successfully, the SD-WAN edge devices must have IP reachability to the vBond controllers in the underlay network.
- B. Correct.
Correct. Underlay network routing protocols like BGP or OSPF must be properly configured to ensure IP reachability, which is critical for overlay connectivity.
- C. Incorrect.
Incorrect. TLS misconfiguration on vSmart controllers affects secure control plane communication but does not directly impact underlay-overlay connectivity.
- D. Correct.
Correct. Firewalls blocking necessary ports, such as UDP port 12346 for DTLS, can prevent tunnel establishment between devices, impacting overlay connectivity.
- E. Incorrect.
Incorrect. Incorrect certificates impact authentication and encryption but do not directly disrupt underlay routing or connectivity.