300-415 Question 198
Select 3An enterprise is deploying Cisco SD-WAN in their network. They want branch sites to access Office 365 directly through the Internet instead of routing traffic to the data center. As the network administrator, you are tasked with configuring direct Internet access (DIA) for these branches. Which steps should be included in your configuration to achieve this?
- A
Enable DIA under the Localized Data Policy in vManage.
- B
Configure a NAT rule to allow traffic to egress directly to the Internet.
- C
Ensure that the branch site has an active public Internet circuit.
- D
Establish a VPN tunnel between the branch and the Office 365 server.
- E
Enable BGP peering between the branch device and the ISP router.
Show answer and explanation
Correct answers: A, B, C
Explanation
To configure direct Internet access (DIA) in Cisco SD-WAN, you must enable DIA policies in vManage to ensure specific traffic exits directly to the Internet, configure NAT to handle IP address translation, and ensure the branch has an active Internet link. VPN tunnels and dynamic routing protocols like BGP are not required for basic DIA setup, especially for accessing SaaS services like Office 365.
- A. Correct.
Correct: Enabling DIA under the Localized Data Policy in vManage ensures that specific application traffic, such as Office 365, is routed directly to the Internet instead of the data center.
- B. Correct.
Correct: A NAT rule is required to translate private IP addresses into public IP addresses for traffic to exit the SD-WAN fabric and egress to the Internet.
- C. Correct.
Correct: An active public Internet circuit is essential for DIA, as it provides the connectivity to access Internet-based services like Office 365.
- D. Incorrect.
Incorrect: A VPN tunnel is unnecessary for direct Internet access as the traffic is not routed through the SD-WAN fabric to reach the Office 365 server.
- E. Incorrect.
Incorrect: BGP peering is not mandatory for DIA configuration. The traffic can be routed directly through NAT and the public Internet without involving dynamic routing protocols like BGP.