In which device state does the WAN edge router create control connections, but data tunnels are not created?

The valid state indicates the device has been authenticated and authorized by vBond with a valid certificate; it does not specifically describe a control-only, no-data-tunnel condition.

Bootstrap state refers to the initial bring-up mode where the device uses a minimal bootstrap configuration to reach controllers for the first time before full onboarding completes.

Active state means the device is fully operational with both control connections and data plane IPsec tunnels established and passing traffic.

The staging state is used for pre-deployment testing and validation - the device connects to vBond, vSmart, and vManage for control plane verification and certificate exchange, but BFD sessions and IPsec data tunnels to other WAN Edge routers are not established, preventing unintended production traffic from flowing through the device.