What is a default protocol for control plane connection?

HTTPS is used for management plane communication with vManage's REST API and GUI, not as the default control plane protocol.

TLS operates over TCP and can be configured for SD-WAN control plane connections, but DTLS over UDP is the default protocol used when no override is specified.

IPsec is the default data plane encapsulation protocol used for securing traffic between WAN Edge routers, not for control plane signaling.

DTLS is the default protocol for securing OMP sessions between WAN Edge routers and vSmart controllers, as well as connections to vBond and vManage. It provides TLS-equivalent security over UDP, which is preferred for the control plane because UDP's lower overhead suits the real-time, bidirectional nature of control plane keepalives and route updates. TLS over TCP can be configured as an alternative but is not the default.