nerdexam
Cisco

350-401 · Question #870

In a Cisco SD-WAN network, which VPN Identifier is reserved as the transport VPN, carrying control traffic?

The correct answer is A. VPN 0. Cisco SD-WAN Transport VPN VPN 0 is reserved as the Transport VPN in Cisco SD-WAN, serving as the underlay network that carries all control plane traffic, including OMP (Overlay Management Protocol), BFD, and DTLS/TLS tunnels between vEdge/cEdge routers and the SD-WAN controllers

Submitted by brentm· Mar 6, 2026Architecture

Question

In a Cisco SD-WAN network, which VPN Identifier is reserved as the transport VPN, carrying control traffic?

Options

  • AVPN 0
  • BVPN 1
  • CVPN 512
  • DVPN 514

How the community answered

(58 responses)
  • A
    91% (53)
  • B
    2% (1)
  • C
    5% (3)
  • D
    2% (1)

Explanation

Cisco SD-WAN Transport VPN

VPN 0 is reserved as the Transport VPN in Cisco SD-WAN, serving as the underlay network that carries all control plane traffic, including OMP (Overlay Management Protocol), BFD, and DTLS/TLS tunnels between vEdge/cEdge routers and the SD-WAN controllers (vSmart, vBond, vManage). Without VPN 0, the SD-WAN fabric cannot establish or maintain its control plane.

The distractors are incorrect because: VPN 1 is simply the first default service-side VPN used for data traffic (not reserved for transport); VPN 512 is reserved as the Management VPN, used for out-of-band device management; and VPN 514 is not a standard reserved VPN in Cisco SD-WAN architecture.

Memory Tip: Think of VPN 0 as "Zero = Foundation" - just like zero is the starting point of numbers, VPN 0 is the foundational transport layer that everything else in SD-WAN is built upon. Also remember the pair: VPN 0 = Transport (underlay), VPN 512 = Management - two reserved "special" VPNs to memorize for the exam.

Topics

#Cisco SD-WAN#VPN 0#Transport VPN#Control Plane

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice