300-415 Question 86
Select 3You are tasked with deploying Cisco SD-WAN controllers in a production environment. During the installation process, you need to ensure that the vBond orchestrator is properly set up to allow communication between the vEdge devices and the rest of the SD-WAN fabric. Which of the following steps are required to successfully install the vBond orchestrator?
- A
Ensure the vBond has a public IP address or is accessible via NAT
- B
Generate and install a certificate for the vBond using the root CA
- C
Configure the vBond with a tunnel interface and assign it a private IP address only
- D
Specify the vManage IP in the vBond configuration
- E
Establish a direct connection between vBond and every vSmart controller during installation
Show answer and explanation
Correct answers: A, B, D
Explanation
The vBond orchestrator acts as the first point of contact for vEdge devices and plays a critical role in establishing secure connectivity within the SD-WAN fabric. To ensure successful installation, it must be reachable from the internet (using public IP or NAT), have a valid certificate for secure communication, and be configured with the vManage IP to coordinate operations. Proper configuration ensures that vBond can authenticate and onboard devices into the SD-WAN fabric.
- A. Correct.
vBond orchestrator needs to be reachable by vEdge devices that may be located on the public internet. This can be achieved by assigning it a public IP address or by making it reachable via NAT.
- B. Correct.
vBond, like other SD-WAN controllers, requires a valid certificate signed by the root CA to authenticate and establish secure communication with other devices in the fabric.
- C. Incorrect.
vBond should not be configured with only a private IP address unless it is part of a private network setup and is unreachable from the internet, which is not typical in production SD-WAN deployments.
- D. Correct.
vBond configuration requires specifying the IP address of the vManage controller to enable proper communication and coordination within the SD-WAN fabric.
- E. Incorrect.
Establishing a direct connection between vBond and every vSmart controller is not required during installation. The secure communication between these components is managed through certificates and the overlay network.