nerdexam
Cisco

300-415 · Question #320

Refer to the exhibit. A vBond controller was added to the controller list with the same Enterprise Root CA certificate as vManage. The two controllers can reach each other via IP/PNO and share the…

The correct answer is A. Configure a valid vBond IP on vManage. If vBond and vManage share certificates and organization names but a control connection is not initiated, configuring a valid vBond IP address on vManage is essential for vManage to discover and connect to vBond.

Controller Deployment

Question

Refer to the exhibit. A vBond controller was added to the controller list with the same Enterprise Root CA certificate as vManage. The two controllers can reach each other via IP/PNO and share the same organization name, but the control connection is not initiated. Which action resolves the issue?

Options

  • AConfigure a valid vBond IP on vManage.
  • BSynchronize the WAN Edge list on vManage with controllers.
  • CConfigure NTP on both controllers to establish a connection.
  • DConfigure a valid system IP on the vBond controller.

How the community answered

(34 responses)
  • A
    88% (30)
  • B
    3% (1)
  • C
    3% (1)
  • D
    6% (2)

Why each option

If vBond and vManage share certificates and organization names but a control connection is not initiated, configuring a valid vBond IP address on vManage is essential for vManage to discover and connect to vBond.

AConfigure a valid vBond IP on vManage.Correct

For vManage to establish a control connection with vBond, it must be explicitly configured with the vBond controller's correct IP address. Even with basic IP reachability, vManage cannot initiate the control plane setup if it does not know where to find vBond.

BSynchronize the WAN Edge list on vManage with controllers.

Synchronizing the WAN Edge list is a subsequent step in the SD-WAN fabric bring-up process, not a prerequisite for the initial control connection between vBond and vManage.

CConfigure NTP on both controllers to establish a connection.

While NTP synchronization is critical for certificate validation and control plane stability, the problem implies a more fundamental communication initiation issue, not a certificate or timing-related error.

DConfigure a valid system IP on the vBond controller.

A valid system IP is necessary for vBond's identity, but if it is already reachable via IP/PNO, it likely has a system IP; the issue lies with vManage knowing how to use that IP to connect to vBond.

Concept tested: SD-WAN controller discovery and connection

Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-release-17-x/sdwan-controller-deployment/m_controller-deployment.html#_install_the_controllers

Topics

#SD-WAN Controller Connectivity#vManage#vBond#Control Plane Setup

Community Discussion

No community discussion yet for this question.

Full 300-415 Practice