09/08/2020
KB'S 5-DAY BOOTCAMP: SD-WAN
• 5-Day Live Class
• Classes from Aug 10-14, 2020 at 8pm Dubai time
• The detailed online LIVE classes will last 4-5 hours each
• The Course Workbook includes 37 labs
• Each Lab will be demonstrated
• The class videos will be made available for later viewing
Upon course completion, students will be able to:
• Know and understand Cisco’s SD-WAN concepts, features, benefits, components & technologies
• Differentiate and explain each of the building blocks of the SD-WAN Solution
• Identify the roles and functions of vEdge, vSmart, vManage and vBond entities
• Know and understand the Zero Touch Provisioning Model
• Identify Overlay Management Protocol (OMP) as a key element of the SD-WAN solution and the role it plays for Control Plane setup
• Understand segmentation of SD-WAN fabric, through the use of VPN’s (VRF’s)
• Understand the role that templates have in SD-WAN solution, differentiate templates and know how to apply them
• Differentiate Control, Data and Application Route Policies and know how they are used in SD-WAN
• Implement and Understand advanced SD-WAN concepts like TLOC Extension, DIA & AAR
• Identify and apply QoS mechanisms to SD-WAN fabric
• Configure a complete SD-WAN Setup from scratch
Class Outline
1. Topics
• SD-WAN OVERVIEW
o Features / Benefits of Cisco SD-WAN
o Controllers Functionalities
o Edge Devices
o SD-WAN Technologies - (VPNs, Color, TLOC etc.)
• INITIALIZING CONTROLLERS
o Enterprise Certificate Server
o Vmanage Initialization - Cli & Gui
o Vbond Initialization - Cli & Gui
o Vsmart Initialization - Cli & Gui
• INITIALIZING VEDGES / CEDGES
o vEdge CLI Initial Configuration
o cEdge CLI Initial Configuration
o Root Certificate Initialization
o vManage registration
• CONFIGURING TEMPLATES
o Feature Templates
o Device Templates
o Configuring vEdges and vSmart using Feature & Device Templates
• CONFIGURING A SERVICE VPN USING TEMPLATES
o Configuring Feature templates for configuring Service VPNs
o Implementing Service VPNs using Templates
• CONFIGURING CENTRALIZED POLICIES
o Policy Overview
o Configuring Application Aware Policies
o Configuring Traffic Engineering
o Configuring Route Filtering
o Configuring Hub-n-Spoke using Custom Policies using TLOCs
• ADVANCED CONFIGURATIONS
o Configuring Controllers in the Cloud
o Configuring vEdges with NAT
o Configuring vEdges with Firewalls
o Configuring TLOC Extensions
o Configuring DIA
o Configuring QoS using Localized Policies
2. Labs
• PREPPING THE NETWORK FOR SD-WAN
o Lab 1 - Configuring the WAN components
o Lab 2 - Installing the Enterprise Certificate Server
• INITIALIZING THE CONTROLLERS
o Lab 3 - Initializing vManage – CLI
o Lab 4 - Initializing vManage - GUI
o Lab 5 - Initializing vBond - CLI
o Lab 6 - Registering vBond in vManage
o Lab 7 - Initializing vSmart - CLI
o Lab 8 - Registering vSmart in vManage
• INITIALIZING THE WAN EDGES
o Lab 9 - Initializing vEdge - CLI
o Lab 10 - Registering vEdges in vManage
o Lab 11 - Initializing cEdge - CLI
o Lab 12 - Registering cEdges in vManage
• CONFIGURING TEMPLATES
o Lab 13 - Configuring Feature Templates - System
o Lab 14 - Configuring Feature Templates - Banner
o Lab 15 - Configuring Feature Templates - VPN & VPN Interfaces for VPN 0 & VPN 512 – Branch Site(vEdges)
o Lab 16 - Configuring Feature Templates – External Routing - OSPF for VPN 0 – Branch Sites(vEdges)
o Lab 17 - Configuring and Deploying Device Templates for vEdge – Branch Sites(vEdges)
o Lab 18 - Configuring Internal Routing Protocols on the Internal Routing Devices – HQ & All Branches
o Lab 19 - Configuring Feature Templates – Service VPN – VPN, VPN Interface and Internal Routing – Branch Sites(vEdges)
o Lab 20 - Implementing a Service VPN using Templates – Branch Sites(vEdges)
o Lab 21 - Configuring Feature Templates for HQ-Site(vEdge1) – VPNs, VPN Interfaces, External & Internal Routing
o Lab 22 - Configuring Device Templates for HQ-Site(vEdge1) to deploy VPN 0, 1 and 512
o Lab 23 - Configuring Feature Templates for CSR – VPNs, VPN Interfaces, External & Internal Routing
o Lab 24 - Configuring Device Templates for CSR to deploy VPN 0, 1 and 512
• CONFIGURING POLICIES
o Lab 25 - Configuring and Deploying Feature and Device Templates for vSmart Controllers
o Lab 26 - Configuring Application Aware Policies using Telnet and Web
o Lab 27 - Configuring Application Aware Policies using Deep Packet Inspection (DPI)
o Lab 28 – Manipulating Traffic flow using TLOCs
o Lab 29 - Configuring Route Filtering
o Lab 30 - Configuring A Hub-n-Spoke Topology using a TLOC
o Lab 31 – Configuring Direct Internet Access (DIA)
o Lab 32 – Configuring the Initial setup for Topology
o Lab 33 – Configuring Firewalls to supports SD-WAN
o Lab 34 - Configuring vEdges with NAT thru Firewalls
o Lab 35 – TLOC Extensions
o Lab 36 – Load Balancing using Multiple vEdges
o Lab 37 – Configuring QoS on the vEdges