300-435 Question 263
Select 4You are tasked with automating the addition of a new branch site into an existing Cisco SD-WAN fabric. The branch requires a specific VPN configuration and routing policy. Using the Cisco SD-WAN vManage REST API, which steps must you take to successfully automate this process?
- A
Use the vManage REST API to create a new device template for the branch site and attach it to the new device.
- B
Send a POST request to the vManage REST API to create a new VPN configuration for the branch, specifying VPN ID and network definitions.
- C
Use the vManage REST API to fetch the existing routing policies and apply them to the branch site.
- D
Send a DELETE request to the vManage REST API to remove unused VPN configurations before adding the new branch site.
- E
Ensure the branch site is authenticated via the vManage API by uploading its WAN Edge certificate.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To automate the addition of a new branch site into a Cisco SD-WAN fabric, key steps include creating and attaching a device template, configuring VPNs, applying routing policies, and authenticating the device using its WAN Edge certificate via the vManage REST API. Removing unused VPN configurations is not a necessary step and could negatively impact the overall network setup.
- A. Correct.
This is correct. Creating a new device template for the branch ensures that the device has the correct configuration parameters. The template must be attached to the device through the API.
- B. Correct.
This is correct. The VPN configuration is critical for the branch site to communicate with the SD-WAN fabric. It can be created programmatically using the vManage API.
- C. Correct.
This is correct. Routing policies need to be fetched and applied to ensure the branch site has the correct data forwarding and routing behavior.
- D. Incorrect.
This is incorrect. A DELETE request to remove unused VPN configurations is not a required step in adding a new branch and could lead to unintended disruptions.
- E. Correct.
This is correct. The branch device must be authenticated into the SD-WAN fabric by uploading its WAN Edge certificate, which is part of the device onboarding process.