Which protocol is implemented to establish secure control plane adjacencies between Cisco SD- WAN nodes?

Question

Options

• AIKE
• BDTIS
• CIPsec
• DESP

• B
  92% (11)
• D
  8% (1)

Explanation

DTLS for Cisco SD-WAN Control Plane Security

DTLS (Datagram Transport Layer Security) is the protocol used to secure control plane adjacencies between Cisco SD-WAN nodes, specifically between vSmart controllers, vManage, and WAN Edge routers using the OMP (Overlay Management Protocol). DTLS provides authentication, integrity, and encryption for these control plane connections over UDP, making it ideal for the dynamic, distributed nature of SD-WAN architectures.

Why the distractors are wrong:

• IKE (A) is a key exchange protocol used to establish IPsec tunnels, but it operates in the data plane, not the SD-WAN control plane
• IPsec (C) secures the data plane (user traffic tunnels between WAN Edge routers), not the control plane adjacencies
• ESP (D) (Encapsulating Security Payload) is a component of IPsec used for data plane encryption, making it similarly unrelated to control plane signaling

Note: The answer choice "B" appears as "DTIS" in the question, which is likely a typo for DTLS. This is a common exam formatting error - recognize it as DTLS.

Memory Tip: Think "DataTLS = Datacenter control"** - DTLS sounds like TLS (used for web security) but works over UDP for real-time SD-WAN control traffic, keeping the "conversation" between controllers secure.

No community discussion yet for this question.