300-415 Question 197
Single answerAn enterprise has deployed Cisco SD-WAN and wants to configure Direct Internet Access (DIA) at its branch locations. The branch routers are configured in dual-uplink mode with one link to the MPLS network and another to the Internet. The administrator needs to ensure that SaaS traffic destined for the Internet exits directly through the Internet connection while other traffic is routed over the MPLS network. Which configuration is required to achieve this?
- A
Configure Application-Aware Routing policies to direct SaaS traffic via the Internet link and all other traffic via the MPLS link.
- B
Enable cloud on-ramp for SaaS to automatically identify and route SaaS traffic directly to the Internet.
- C
Use a control policy to advertise default routes over the MPLS link and specific SaaS prefixes over the Internet link.
- D
Configure a data policy to match SaaS traffic and set the next-hop as the Internet interface.
Show answer and explanation
Correct answer: B
Explanation
The correct answer is enabling cloud on-ramp for SaaS, which is a Cisco SD-WAN feature designed to identify SaaS traffic and automatically route it to the Internet through the most optimal path. This approach minimizes the need for manual policy configurations and ensures efficient routing for SaaS applications.
- A. Incorrect.
This is not the correct approach because Application-Aware Routing policies are used to select the best path based on performance metrics like latency, loss, and jitter. While they can impact SaaS traffic indirectly, they are not specifically designed for DIA.
- B. Correct.
This is the correct answer. Enabling cloud on-ramp for SaaS in Cisco SD-WAN automatically identifies SaaS applications and routes their traffic directly to the Internet, simplifying the configuration for DIA.
- C. Incorrect.
This is incorrect because control policies are used to manipulate route advertisements and are not designed specifically to manage DIA or SaaS traffic routing.
- D. Incorrect.
This is incorrect because data policies can be used for traffic forwarding, but they do not provide the automated intelligence required for identifying and prioritizing SaaS traffic for DIA.