nerdexam
Cisco

300-415 · Question #63

What is the purpose of "vpn 0" in the configuration template when onboarding a WAN Edge node?

The correct answer is D. It carries control traffic over secure DTLS or TLS connections between vSmart controllers and vEdge routers, and between vSmart and vBond. VPN 0 in the Cisco SD-WAN configuration template is specifically designed to carry control traffic, establishing secure connections for the overlay network's control plane.

Architecture

Question

What is the purpose of "vpn 0" in the configuration template when onboarding a WAN Edge node?

Options

  • AIt carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vBond.
  • BIt carries control out-of-band network management traffic among the Viptela devices in the overlay network.
  • CIt carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vManager.
  • DIt carries control traffic over secure DTLS or TLS connections between vSmart controllers and vEdge routers, and between vSmart and vBond.

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    8% (3)
  • C
    3% (1)
  • D
    86% (32)

Why each option

VPN 0 in the Cisco SD-WAN configuration template is specifically designed to carry control traffic, establishing secure connections for the overlay network's control plane.

AIt carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vBond.

VPN 0 utilizes DTLS or TLS for its control plane connections, not IPsec.

BIt carries control out-of-band network management traffic among the Viptela devices in the overlay network.

VPN 0 carries control plane traffic for the overlay network, not out-of-band network management traffic, which is typically handled by VPN 512 or dedicated management interfaces.

CIt carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vManager.

VPN 0 uses DTLS or TLS for control plane connections and does not connect vSmart to vManager directly for control traffic, as vManager is the network management system.

DIt carries control traffic over secure DTLS or TLS connections between vSmart controllers and vEdge routers, and between vSmart and vBond.Correct

VPN 0 is dedicated to the control plane in Cisco SD-WAN, using secure DTLS or TLS tunnels to form connections between vSmart controllers and vEdge routers, and between vSmart and vBond controllers for orchestration. These tunnels ensure the secure exchange of control plane information and policies within the SD-WAN fabric.

Concept tested: Cisco SD-WAN VPN 0 control plane

Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/onboard-wan-edge-devices.html#C_Configure_VPN_0_Interfaces_1720.html

Topics

#VPN 0#Control Plane#Cisco SD-WAN Architecture#DTLS/TLS

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-415 Practice