nerdexam
Cisco

350-401 · Question #842

Which function is performed by vSmart in the Cisco SD-WAN architecture'?

The correct answer is A. distribution of IPsec keys. vSmart Controller in Cisco SD-WAN vSmart acts as the centralized control plane for the SD-WAN fabric, and one of its core responsibilities is distributing IPsec encryption keys to WAN Edge routers, enabling them to establish secure data plane tunnels (IPsec) with one another with

Submitted by hassan_iq· Mar 6, 2026Architecture

Question

Which function is performed by vSmart in the Cisco SD-WAN architecture'?

Options

  • Adistribution of IPsec keys
  • Bexecution of localized policies
  • Credistribution between OMP and other routing protocols
  • Dfacilitation of NAT detection and traversal

How the community answered

(40 responses)
  • A
    95% (38)
  • B
    3% (1)
  • D
    3% (1)

Explanation

vSmart Controller in Cisco SD-WAN

vSmart acts as the centralized control plane for the SD-WAN fabric, and one of its core responsibilities is distributing IPsec encryption keys to WAN Edge routers, enabling them to establish secure data plane tunnels (IPsec) with one another without requiring direct peer-to-peer key negotiation. This key distribution happens via the OMP (Overlay Management Protocol) sessions that vSmart maintains with all WAN Edge devices.

Why the distractors are wrong:

  • B (localized policies): Localized policies are executed on the WAN Edge routers themselves, not on vSmart - vSmart distributes centralized policies.
  • C (OMP redistribution): Redistribution between OMP and other routing protocols (like OSPF or BGP) is handled by the WAN Edge routers, not vSmart.
  • D (NAT detection/traversal): NAT detection and traversal facilitation is a function of the vBond orchestrator, which helps establish initial connections between components.

Memory Tip: Think of vSmart as the "Smart Brain" of the network - it centrally controls routing information and securely distributes keys, while vBond is the "Bouncer" that handles introductions and NAT traversal at the door.

Topics

#Cisco SD-WAN#vSmart#IPsec keys#Control Plane

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice