Cisco Catalyst SD-WAN

Anastasiya Volkova, CCIE No. 54378 (EN and Security), is a Solutions Architect on the Cisco Global Demo Engineering team, with a focus on Enterprise networking, Security and Cloud solutions, and multi-domain integrations. Anastasiya has more than 12 years of industry experience. Her background includes different areas of expertise, from hands-on experience in design, implementation, and support of network solutions to conducting trainings and technical presentations. She is very passionate about sharing her knowledge with others, hoping to help more people fall in love with the technology.  Osvaldo Salazar Tovar is a Technical Solutions Architect/Solutions Engineer in the Cisco Enterprise Routing and SD-WAN group. Throughout his career, he has supported the Global Service Provider and Enterprise Networking teams in LATAM through various technical sales engineering roles. He is currently working with different verticals in the United States, assisting customers and partners in designing and implementing nextgeneration WANs and emphasizing the importance of the WAN. He holds a bachelor of science degree in information and communication technologies from Instituto Tecnologico y de Estudios Superiores de Monterrey (ITESM).  Constantin Mohorea, CCIE No. 16223, CCDE No. 20170054, is a Customer Delivery Technical Leader at Cisco with more than 20 years of experience in the networking industry. He specializes in designing and delivering Cisco SD-WAN technologies to clients across various industries and has a strong history of helping clients achieve their business goals. He is passionate about the evolving trends in programmability and automation within the networking sector and has authored a Cisco Press DevNet certification book. Constantin resides in Toronto, Canada.  Dustin Schuemann, CCIE No. 59235 (R&S), is very passionate about giving back through mentoring and building communities in the IT industry. Dustin has 22 years of experience in the networking field, and before joining Cisco he worked in the manufacturing, retail, and finance industries. Dustin currently works in Cisco’s Global Demo Engineering organization as a Solutions Architect, leading the demo strategic direction. Dustin speaks on SD-WAN at Cisco Live globally and has been inducted into the Cisco Live Hall of Fame by achieving Distinguished Speaker status at five different events.

• Introduction xxiiChapter 1 Introduction to Cisco Catalyst SD-WAN 2Transport Independence 3Use Cases Demanding Changes in the WAN 6Cloud Trends and Adoption 9Summary 12Review All Key Topics 12Key Terms 12Chapter Review Questions 12Chapter 2 Cisco Catalyst SD-WAN Components 14Data Plane 16Management Plane 22Control Plane 24Orchestration Plane 27Multi-tenancy Options 28Deployment Options 29Summary 30Review All Key Topics 30Key Terms 31Chapter Review Questions 31References 32Chapter 3 Control Plane and Data Plane Operations 34Control Plane Operations 35Data Plane Operations 65Summary 88Review All Key Topics 88Key Terms 89Chapter Review Questions 89References 89Chapter 4 Onboarding and Provisioning 92Configuration Templates 94Developing and Deploying Templates 98Configuration Groups and Feature Profiles 102Developing and Deploying Configuration Groups 103Onboarding Devices 111Key Settings in Device Templates and Configuration Groups 117Summary 120Review All Key Topics 120Key Terms 120Chapter Review Questions 121References 122Chapter 5 Cisco Catalyst SD-WAN Design and Migration 124Cisco SD-WAN Design Methodology 125Cisco SD-WAN Control Components Design 136Cisco SD-WAN Implementation Preparation 154Cisco SD-WAN Transport Connectivity 157Cisco SD-WAN Data Center Design 166Cisco SD-WAN Branch Design 170Integrating Cisco SD-WAN with Existing Networks 176Summary 185Review All Key Topics 185Chapter Review Questions 186References 189Chapter 6 Introduction to Cisco Catalyst SD-WAN Policies 190Purpose of Cisco Catalyst SD-WAN Policies 190Types of Cisco Catalyst SD-WAN Policies 191Cisco Catalyst SD-WAN Policy Construction 195Cisco Catalyst SD-WAN Policy Administration, Activation, andPacket Forwarding Order of Operations 208Summary 210Review All Key Topics 210Define Key Terms 210Chapter Review Questions 211Chapter 7 Centralized Control Policies 214Centralized Control Policy Overview 215Use Case 1: Isolating Remote Branches from Each Other 217Use Case 2: Enabling Branch-to-Branch Communication Through Data Centers 235Use Case 3: Traffic Engineering at Sites with Multiple Routers 251Use Case 4: Preferring Regional Data Centers for Internet Access 260Use Case 5: Regional Mesh Networks 267Use Case 6: Enforcing Security Perimeters with Service Insertion 274Use Case 7: Isolating Guest Users from the Corporate WAN 281Use Case 8: Creating Different Network Topologies for Each Segment 284Use Case 9: Creating Extranets and Access to Shared Services 288Summary 299Review All Key Topics 300Define Key Terms 300Chapter Review Questions 300References 302Chapter 8 Centralized Data Policies 304Centralized Data Policy Overview 304Use Case 10: Direct Internet Access for Guest Users 306Use Case 11: Direct Cloud Access for Trusted Applications 322Use Case 12: Application-Based Traffic Engineering 331Application-Based Traffic Engineering with Policy Groups 338Use Case 13: Protecting Corporate Users with a Secure Internet Gateway 341Use Case 14: Protecting Applications from Packet Loss 353Summary 363Review All Key Topics 364Define Key Terms 364Chapter Review Questions 364References 366Chapter 9 Application-Aware Routing Policies 368The Business Imperative for Application-Aware Routing 368The Mechanics of Traditional App-Route Policies 369Enhanced Application-Aware Routing 402Summary 407Review All Key Topics 407Define Key Terms 408Chapter Review Questions 408References 410Chapter 10 Localized Policies 412Introduction to Localized Policies 412Localized Control Policies 413Localized Data Policies 426Quality of Service Policies 430Summary 439Review All Key Topics 440Chapter Review Questions 440References 442Chapter 11 Cisco Catalyst SD-WAN Security 444Cisco Catalyst SD-WAN Security: Why and What 444Cisco Catalyst SD-WAN Security Policies 448Unified Security Policies 479Secure Internet Gateway (SIG) 483Policy Groups 486Secure Segmentation 494SD-WAN Manager Authentication and Authorization 503Summary 510Review All Key Topics 511Define Key Terms 511Chapter Review Questions 511Reference 513Chapter 12 Cisco Catalyst SD-WAN Cloud OnRamp 514Cloud OnRamp for SaaS 516Cloud OnRamp for Multicloud 534SD-WAN Cloud Interconnect 546Summary 548Review All Key Topics 549Define Key Terms 549Chapter Review Questions 549References 550Chapter 13 Cisco Catalyst SD-WAN Programmability 552Cisco Catalyst SD-WAN API Overview 553Using the Cisco Catalyst SD-WAN API with Python 563Cisco Catalyst SD-WAN Infrastructure as Code 586Summary 592Review All Key Topics 592Key Terms 592Chapter Review Questions 592References 594Chapter 14 Cisco Catalyst SD-WAN Monitoring and Operations 596SD-WAN Manager Monitoring Tools 596SD-WAN Manager Troubleshooting Tools 610SD-WAN Monitoring with ThousandEyes 619SD-WAN Analytics Overview 629Summary 633Review All Key Topics 633Chapter Review Questions 633Appendix A Answers to Chapter Review Questions 636Glossary of Key Terms 649  978038313906, TOC, 9/13/2024