A large retail organization decided to move some of the branch applications to the AWS cloud. How does the network architect extend the in-house Cisco SD-WAN branch to cloud network into AWS?

Question

Accepted Answer

A. Create virtual WAN Edge devices Cloud through the AWS online software store Cisco provides virtual WAN Edge devices (Catalyst 8000V or CSR 1000V) available through the AWS Marketplace that can be instantiated as EC2 instances within a VPC. These virtual WAN Edge devices establish IPsec tunnels back to the SD-WAN fabric, allowing branch offices to access AWS-hosted applications with full SD-WAN policy enforcement, visibility, and path optimization.

Answer

B. Create virtual instances of vSmart Cloud through the AWS online software store vSmart is the centralized control plane controller - deploying virtual vSmart instances in AWS does not extend branch connectivity to cloud-hosted applications.

Answer

C. Create GRE tunnels to AWS from each branch over the Internet GRE tunnels to AWS would bypass the SD-WAN fabric entirely, losing all SD-WAN policy, visibility, application-aware routing, and encryption management capabilities.

Answer

D. Install the AWS Cloud Router in the main data center and provide the connectivity from each branch There is no Cisco 'AWS Cloud Router' product intended for data center installation - this is not a valid Cisco SD-WAN cloud extension mechanism.

A large retail organization decided to move some of the branch applications to the AWS cloud. How does the network architect extend the in-house Cisco SD-WAN branch to cloud network into AWS?

Question

Exhibit

Options

How the community answered

Why each option

Topics

Community Discussion