300-415 Question 95
Select 3You are deploying a new branch site in your Cisco SD-WAN network. As part of the deployment process, you need to ensure that the new vEdge device is properly authenticated and trusted within the SD-WAN overlay. Which of the following steps are required to successfully configure and verify certificates and the device list for this vEdge device?
- A
Ensure the vEdge device serial number is added to the vManage device list.
- B
Install a signed certificate from the root Certificate Authority (CA) on the vEdge device.
- C
Verify the vSmart controller has the same root CA certificate as the vEdge device.
- D
Manually copy the vEdge device's private key to all SD-WAN controllers.
- E
Synchronize the device list and certificates between vManage and the vEdge device.
Show answer and explanation
Correct answers: A, C, E
Explanation
To configure and verify certificates and the device list for a new vEdge device, the serial number must be added to the vManage device list for onboarding. Additionally, the root CA certificate must be consistent across all SD-WAN components, including vSmart and vEdge devices, to establish trust. Finally, the synchronization process ensures proper certificate and device list updates between vManage and the new device. Incorrect practices, such as manual private key copying, are unnecessary and insecure in Cisco SD-WAN.
- A. Correct.
Ensuring the vEdge device's serial number is in the vManage device list is necessary for device authentication and onboarding in Cisco SD-WAN.
- B. Incorrect.
While certificates are required, they are automatically provisioned by vManage during the onboarding process if the device is properly added to the device list. Manually installing a signed certificate is not typically needed.
- C. Correct.
Verification of the root CA certificate between the vSmart controller and the vEdge device ensures trust and secure communication within the SD-WAN fabric.
- D. Incorrect.
Manually copying private keys is not a valid practice in Cisco SD-WAN. The system securely manages keys and certificates automatically.
- E. Correct.
Synchronizing the device list and certificates between vManage and the vEdge device ensures that the device is properly authenticated and can join the SD-WAN overlay.