nerdexam
Cisco

300-415 · Question #91

Refer to the exhibit. An engineer is troubleshooting an issue where vManage and vSmart nave a problem establishing a connection to vBond. Which action fixes the issue?

The correct answer is A. Reconfigure the vBond command on the vBond as vbond 150.5.1.3 local. The vBond orchestrator must be configured with the 'local' keyword in the vbond command so it identifies itself as the vBond device rather than pointing to a remote vBond address.

Controller Deployment

Question

Refer to the exhibit. An engineer is troubleshooting an issue where vManage and vSmart nave a problem establishing a connection to vBond. Which action fixes the issue?

Options

  • AReconfigure the vBond command on the vBond as vbond 150.5.1.3 local
  • BConfigure the tunnel interface on all three controllers with a color of transport
  • CRemove the encapsulation ipsec command under the tunnel interface of vBond.
  • DConfigure encapsulation as IPsec under the tunnel interface of vManage and vSmart

How the community answered

(29 responses)
  • A
    79% (23)
  • B
    3% (1)
  • C
    3% (1)
  • D
    14% (4)

Why each option

The vBond orchestrator must be configured with the 'local' keyword in the vbond command so it identifies itself as the vBond device rather than pointing to a remote vBond address.

AReconfigure the vBond command on the vBond as vbond 150.5.1.3 localCorrect

When configuring vBond, the command 'vbond <ip-address> local' is required on the vBond device itself to indicate it is the local orchestrator. Without the 'local' keyword, the device treats the address as a remote vBond to connect to rather than declaring itself as the vBond, causing vManage and vSmart to fail when attempting to establish control connections through it.

BConfigure the tunnel interface on all three controllers with a color of transport

The transport color is used to categorize WAN interfaces for policy purposes and does not affect the control connection establishment between controllers and vBond.

CRemove the encapsulation ipsec command under the tunnel interface of vBond.

Removing IPsec encapsulation from vBond would break secure control plane connections rather than fix them, as IPsec is required for DTLS/TLS control connections.

DConfigure encapsulation as IPsec under the tunnel interface of vManage and vSmart

vManage and vSmart already use IPsec encapsulation for their tunnel interfaces by default - adding it would not resolve a vBond identification configuration issue.

Concept tested: vBond local orchestrator configuration command

Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/cisco-sd-wan-overlay-network-bringup.html

Topics

#vBond configuration#Controller connectivity#SD-WAN control plane#Troubleshooting

Community Discussion

No community discussion yet for this question.

Full 300-415 Practice