300-415 Question 310
Select 3An enterprise is deploying Cisco SD-WAN and wants to ensure secure communication between vEdge devices and the vSmart controllers. The team also needs to monitor and report on the health of the SD-WAN fabric. Which of the following steps are required to achieve this?
- A
Generate and install root CA certificates on all SD-WAN devices.
- B
Enable DTLS or TLS control connections for authentication between vEdge and vSmart.
- C
Configure SNMP traps to monitor SD-WAN devices and send alerts.
- D
Use Syslog to report events from the SD-WAN controllers.
- E
Enable OSPF authentication to secure routing between SD-WAN devices.
Show answer and explanation
Correct answers: B, C, D
Explanation
To achieve secure communication in Cisco SD-WAN, DTLS/TLS must be enabled for control connections between devices. SNMP traps and Syslog are standard methods for monitoring and reporting on network health and events. Root CA certificates are not manually required in Cisco SD-WAN, as the vBond orchestrator handles device authentication. OSPF authentication is unrelated to the specific requirements of this scenario.
- A. Incorrect.
Generating and installing root CA certificates is not a required step for SD-WAN authentication, as Cisco SD-WAN uses the Cisco vBond orchestrator to manage certificates and establish secure control connections.
- B. Correct.
Enabling DTLS or TLS control connections is essential for authentication and secure communication between vEdge and vSmart controllers.
- C. Correct.
Configuring SNMP traps is a key step for monitoring SD-WAN devices and ensuring alerts are sent in case of issues.
- D. Correct.
Using Syslog is a valid method for reporting events from SD-WAN controllers, providing centralized logging and event tracking.
- E. Incorrect.
OSPF authentication is used for securing OSPF routing but is not directly related to configuring authentication, monitoring, and reporting in Cisco SD-WAN.