300-415 · Question #91
Refer to the exhibit. An engineer is troubleshooting an issue where vManage and vSmart nave a problem establishing a connection to vBond. Which action fixes the issue?
The correct answer is A. Reconfigure the vBond command on the vBond as vbond 150.5.1.3 local. The vBond orchestrator must be configured with the 'local' keyword in the vbond command so it identifies itself as the vBond device rather than pointing to a remote vBond address.
Question
Options
- AReconfigure the vBond command on the vBond as vbond 150.5.1.3 local
- BConfigure the tunnel interface on all three controllers with a color of transport
- CRemove the encapsulation ipsec command under the tunnel interface of vBond.
- DConfigure encapsulation as IPsec under the tunnel interface of vManage and vSmart
How the community answered
(29 responses)- A79% (23)
- B3% (1)
- C3% (1)
- D14% (4)
Why each option
The vBond orchestrator must be configured with the 'local' keyword in the vbond command so it identifies itself as the vBond device rather than pointing to a remote vBond address.
When configuring vBond, the command 'vbond <ip-address> local' is required on the vBond device itself to indicate it is the local orchestrator. Without the 'local' keyword, the device treats the address as a remote vBond to connect to rather than declaring itself as the vBond, causing vManage and vSmart to fail when attempting to establish control connections through it.
The transport color is used to categorize WAN interfaces for policy purposes and does not affect the control connection establishment between controllers and vBond.
Removing IPsec encapsulation from vBond would break secure control plane connections rather than fix them, as IPsec is required for DTLS/TLS control connections.
vManage and vSmart already use IPsec encapsulation for their tunnel interfaces by default - adding it would not resolve a vBond identification configuration issue.
Concept tested: vBond local orchestrator configuration command
Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/cisco-sd-wan-overlay-network-bringup.html
Topics
Community Discussion
No community discussion yet for this question.