300-415 Question #19: Real Exam Question with Answer & Explanation

The correct answer is C: vBond. The vBond orchestrator must reside on a public IP address because it is the first point of contact for all SD-WAN devices and must be reachable across NAT boundaries to facilitate device onboarding.

Architecture

Question

Which component of the Cisco SD-WAN control plane architecture should be located in a public Internet address space and facilitates NAT-traversal?

Options

AWAN Edge
BvSmart
CvBond
DvManage

Explanation

The vBond orchestrator must reside on a public IP address because it is the first point of contact for all SD-WAN devices and must be reachable across NAT boundaries to facilitate device onboarding.

Common mistakes.

A. WAN Edge routers are the devices that sit behind NAT and rely on vBond to traverse it - they do not need a public IP address in the architecture.
B. vSmart controllers exchange OMP sessions with WAN Edges but do not need to be publicly addressed, as their connectivity can be established after vBond facilitates initial NAT traversal.
D. vManage handles management plane functions and does not need a public IP address specifically for NAT traversal - its accessibility depends on the operator's management network design.

Concept tested. Cisco SD-WAN vBond public IP NAT traversal role

Reference. https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/system-overview.html

Topics

#SD-WAN Components#vBond Orchestrator#Control Plane Architecture#NAT Traversal

Community Discussion

No community discussion yet for this question.

Full 300-415 Practice