300-415 · Question #185
An engineer must apply the configuration for certificate installation to vBond Orchestrator and vSmart Controller. Which configuration accomplishes this task?
The correct answer is A. vpn 0 interface eth1 ip address 199.1.1.1/28 tunnel-interface allow-service sshd allow-service netconf no shutdown. Certificate installation on vBond and vSmart controllers requires configuring the tunnel-interface within VPN 0, which is dedicated to the transport network.
Question
Options
- Avpn 0 interface eth1 ip address 199.1.1.1/28 tunnel-interface allow-service sshd allow-service netconf no shutdown
- Bvpn 512 interface eth1 ip address 199.1.1.1/28 tunnel-interface allow-service sshd allow-service netconf
How the community answered
(67 responses)- A94% (63)
- B6% (4)
Why each option
Certificate installation on vBond and vSmart controllers requires configuring the tunnel-interface within VPN 0, which is dedicated to the transport network.
Certificates are essential for establishing secure OMP and control plane connections in Cisco SD-WAN, which utilize the tunnel interface within VPN 0, the transport VPN. Enabling 'allow-service sshd' and 'allow-service netconf' on this interface facilitates management access and configuration, which are necessary steps for certificate installation and controller operations.
VPN 512 is designated as the management VPN, primarily used by vManage for out-of-band management of devices, and is not where vBond and vSmart certificates are used to secure control plane tunnels for data plane functions.
Concept tested: Cisco SD-WAN controller certificate configuration
Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/m-sdwan-config.html#C_ID_0F191590_00
Topics
Community Discussion
No community discussion yet for this question.