300-415 Question 71
Select 3You are deploying Cisco SD-WAN controllers in a hybrid cloud environment. The vManage, vSmart, and vBond controllers must be configured to ensure secure communication between the controllers and edge devices. During the setup, you decide to deploy the vBond controller in a public cloud and the vManage and vSmart controllers in a private data center. Which key considerations are essential for this deployment to function correctly?
- A
The vBond controller must have a public IP address accessible by all edge devices and other controllers.
- B
All controllers must use the same Organization Name configured in the Certificate Authority (CA).
- C
The vManage controller requires direct internet access for communication with the vSmart controller.
- D
A secure DTLS or TLS connection must be established between the vSmart controller and edge devices.
- E
The vBond controller requires persistent storage for logging and analytics.
Show answer and explanation
Correct answers: A, B, D
Explanation
In a Cisco SD-WAN deployment, the vBond controller must be publicly accessible to facilitate secure connections between controllers and edge devices. Using the same Organization Name across controllers ensures proper certificate authentication and trust. Secure DTLS/TLS communication between the vSmart controller and edge devices is mandatory to protect data integrity and confidentiality. The vManage does not require direct internet access to communicate with other controllers, and persistent storage for logging is not a vBond requirement.
- A. Correct.
The vBond controller acts as the orchestrator and must be publicly accessible to establish secure tunnels with edge devices and other controllers.
- B. Correct.
All controllers must use the same Organization Name, as it is a critical part of the certificate validation process and ensures trust between components.
- C. Incorrect.
The vManage controller does not require direct internet access to communicate with the vSmart controller. They communicate over secure tunnels within the SD-WAN fabric.
- D. Correct.
The vSmart controller communicates with edge devices using secure DTLS or TLS connections to ensure confidentiality and integrity of data.
- E. Incorrect.
The vBond controller does not require persistent storage for logging and analytics. These functions are primarily managed by vManage.