300-415 Question 175
Single answerAn enterprise is deploying a Cisco SD-WAN solution and wants to enforce a control policy that restricts branch sites from establishing direct communication with each other. Instead, all traffic between branch sites must pass through a data center. Which configuration approach should you take to achieve this requirement?
- A
Configure a centralized control policy to match branch site TLOCs and apply a 'drop' action for branch-to-branch communication
- B
Use a localized control policy on each branch site to redirect traffic to the data center
- C
Implement a centralized control policy that sets the data center as the preferred next-hop for all branch-to-branch traffic
- D
Configure a data policy to block direct branch-to-branch communication and redirect traffic through the data center
Show answer and explanation
Correct answer: C
Explanation
To enforce a requirement where all branch-to-branch communication must pass through a data center, a centralized control policy is the correct approach. Control policies operate at the control plane level, influencing routing decisions by modifying TLOC or next-hop preferences. By configuring the data center as the preferred next-hop for traffic between branch sites, the policy ensures that all such traffic is routed through the data center. Other options either block traffic entirely, rely on localized policies, or involve data plane policies, which do not meet the stated requirement.
- A. Incorrect.
Incorrect. While centralized control policies can restrict communication between specific TLOCs, a 'drop' action would block traffic entirely rather than redirecting it to the data center.
- B. Incorrect.
Incorrect. Localized control policies are applied at the site level and cannot influence traffic redirection across the entire SD-WAN fabric.
- C. Correct.
Correct. A centralized control policy can define preferred next-hops for traffic, ensuring that branch-to-branch traffic is routed through the data center. This fulfills the requirement.
- D. Incorrect.
Incorrect. Data policies operate at the data plane and are used for application-aware routing or traffic manipulation, but they do not enforce routing decisions at the control plane level.