300-415 Question 20
Select 3An enterprise is deploying Cisco SD-WAN and wants to ensure that the control plane is fully operational between vSmart controllers and edge devices. During the implementation, it is observed that the edge devices are not receiving routing updates from the vSmart controller. Which of the following could be the root cause of the issue?
- A
The OMP session between the edge device and vSmart controller is not established.
- B
The edge device is not authenticated by the vBond orchestrator.
- C
The vSmart controller is not configured with the correct VPN segmentation policies.
- D
The control plane security certificates are invalid or not installed.
- E
The WAN transport network is experiencing high latency, preventing OMP messages from being exchanged.
Show answer and explanation
Correct answers: A, D, E
Explanation
The vSmart controller and edge devices communicate using OMP to exchange control plane information such as routing updates, TLOCs, and policies. For OMP sessions to be successfully established, the control plane must have valid security certificates, and the underlying transport network should allow for reliable message exchange. Additionally, the OMP session itself must be active and functional. Issues like invalid certificates, OMP session failures, or WAN transport latency can disrupt control plane operations, preventing routing updates from reaching the edge devices.
- A. Correct.
The OMP (Overlay Management Protocol) session must be established between the edge device and vSmart controller for routing updates and control plane functionality to work. If this session is not established, the edge device will not receive routing information.
- B. Incorrect.
The vBond orchestrator is responsible for initial device authentication and onboarding into the SD-WAN fabric, but it does not directly affect ongoing OMP session establishment between the vSmart controller and edge devices.
- C. Incorrect.
Incorrect VPN segmentation policies on the vSmart controller could impact data plane traffic forwarding but do not directly prevent the establishment of OMP sessions or the exchange of routing updates.
- D. Correct.
Control plane security certificates are crucial for establishing secure connections between SD-WAN components. If certificates are invalid or not installed, OMP sessions cannot be established.
- E. Correct.
High latency on the WAN transport network can prevent OMP messages from being exchanged effectively, leading to control plane issues between the vSmart controller and edge devices.