300-420 Question 228
Single answerAn enterprise is deploying Cisco SD-WAN to modernize its network infrastructure. During the deployment, the team needs to ensure that devices are properly authenticated, onboarded, and that management and control plane communication is established securely. Which component of the Cisco SD-WAN architecture is responsible for device authentication and initial secure communication establishment?
- A
vManage
- B
vSmart
- C
vBond
- D
WAN Edge
Show answer and explanation
Correct answer: C
Explanation
The vBond orchestrator is the key component in the Cisco SD-WAN architecture responsible for orchestrating the initial onboarding and authentication of devices. It ensures that WAN Edge devices are securely connected to the SD-WAN fabric by establishing initial secure communication with the vManage and vSmart components. This makes vBond critical for device authentication and provisioning within the SD-WAN architecture.
- A. Incorrect.
vManage is the management plane component responsible for central configuration, provisioning, and monitoring of the SD-WAN fabric, but it does not handle initial device authentication.
- B. Incorrect.
vSmart is the control plane component responsible for policy enforcement and routing decisions, but it does not handle device onboarding and authentication.
- C. Correct.
vBond is the orchestration plane component responsible for authenticating WAN Edge devices, facilitating their onboarding, and establishing secure connections between the management, control, and data planes.
- D. Incorrect.
WAN Edge devices are responsible for data forwarding at the branch or edge of the network, but they require authentication and onboarding facilitated by vBond.