300-415 Question 98
Select 3A network engineer is troubleshooting control plane connectivity issues in a Cisco SD-WAN environment. The engineer notices that a branch vEdge router is unable to establish a secure control connection with the vSmart controller. Which of the following steps should the engineer take to resolve this issue?
- A
Verify that the vEdge router has a valid certificate installed and authorized in the vManage.
- B
Check if the vEdge router's local time is synchronized with an NTP server.
- C
Ensure that the vEdge router's TLOC color matches the one configured on the vSmart controller.
- D
Confirm that the vEdge router can reach the vSmart controller's public IP through its WAN interface.
- E
Verify that the OMP session between the vEdge router and vSmart is in an 'Established' state.
Show answer and explanation
Correct answers: A, B, D
Explanation
To troubleshoot control plane connectivity issues between the vEdge and vSmart, start by verifying that the vEdge has a valid and authorized certificate, as this is essential for secure communications. Ensuring time synchronization via NTP is also critical to prevent authentication failures. Additionally, the vEdge must have network connectivity to the vSmart controller's public IP address. TLOC color and OMP session states are not directly relevant to diagnosing the initial control plane connectivity problem.
- A. Correct.
A valid certificate is mandatory for a secure control connection between the vEdge and vSmart. If the certificate is missing or not authorized in vManage, the connection cannot be established.
- B. Correct.
NTP synchronization is crucial because mismatched time on devices can lead to authentication failures during the secure control connection handshake.
- C. Incorrect.
The TLOC color configuration is not directly related to control plane connectivity between the vEdge and vSmart. It is primarily used for data plane routing.
- D. Correct.
The vEdge router must be able to reach the vSmart controller's public IP to establish a control connection. Without connectivity, the connection cannot be initiated.
- E. Incorrect.
The OMP session state is relevant after the control connection is established. It is not directly related to troubleshooting the control plane connectivity issue at this stage.