Requirements
- PC or Laptop with internet Connection
- Basic Knowledge of Networking fundamentals
Download Syllabus PDF
Implementing Cisco SD-WAN Solutions v1.0 (300-415) : Download syllabus blueprint (PDF)
Exam Description: Implementing Cisco SD-WAN Solutions v1.0 (ENSDWI 300-415) is a 90-minute exam associated with the CCNP Enterprise Certification. This exam certifies a candidate’s knowledge of Cisco’s SD-WAN solution including SD-WAN architecture, controller deployment, edge router deployment, policies, security, quality or service, multicast and management and operations.
The course, Implementing Cisco SD-WAN Solutions, helps candidates to prepare for this exam.
The following topics are general guidelines for the content likely to be included on the exam.
However,other related topics may also appear on any specific delivery of the exam. To better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.
Course Content – Detailed
- [THEORY] 1.1 Describe Cisco SD-WAN architecture and components
- [THEORY] 1.1.a Orchestration plane (vBond, NAT)
- [THEORY] 1.1.b Management plane (vManage)
- [THEORY] 1.1.c Control plane (vSmart, OMP)
- [THEORY] 1.1.d Data plane (WAN Edge)
- [THEORY] 1.1.d (i) TLOC
- [THEORY] 1.1.d (ii) IPsec and GRE
- [THEORY] 1.1.d (iii) vRoute
- [THEORY] 1.1.d (iv) BFD
- [THEORY] 1.2 Describe Cisco SD-WAN Edge platforms and capabilities
- [THEORY] 1.3 Describe Cisco SD-WAN Cloud OnRamp
- [THEORY] 1.3.a SaaS
- [THEORY] 1.3.b IaaS
- [THEORY] 1.3.c Colocation
- [THEORY] 2.1 Describe controller cloud deployment
- [THEORY] 2.2 Describe controller on-premises deployment
- [THEORY] 2.2.a Hosting platform (KVM and Hypervisor)
- [THEORY] 2.2.b Installing controllers
- [THEORY] 2.2.c Scalability and redundancy
- [THEORY] 2.3 Configure certificates and device lists
- [THEORY] 2.4 Troubleshoot control plane connectivity between controllers
- [THEORY] 3.5 Configure CLI and vManage feature configuration templates
- [THEORY] 3.5.a VRRP
- [THEORY] 3.5.b OSPF
- [THEORY] 3.5.c BGP
- [THEORY] 3.5.d EIGRP
- [THEORY] 3.6 Describe multicast support in Cisco SD-WAN
- [THEORY] 3.1 Describe WAN Edge deployment
- [THEORY] 3.1.a On-boarding
- [THEORY] 3.1.b Orchestration with zero-touch provisioning and plug-and-play
- [THEORY] 3.1.c Data center and regional hub deployments
- [THEORY] 3.2 Configure Cisco SD-WAN data plane
- [THEORY] 3.2.a Circuit termination and TLOC-extension
- [THEORY] 3.2.b Dynamic tunnels
- [THEORY] 3.2.c Underlay-overlay connectivity
- [THEORY] 3.3 Configure OMP
- [THEORY] 3.4 Configure TLOCs
- [THEORY] 4.1 Configure control policies
- [THEORY] 4.2 Configure data policies
- [THEORY] 4.3 Configure end-to-end segmentation
- [THEORY] 4.3.a VPN segmentation
- [THEORY] 4.3.b Topologies
- [THEORY] 4.4 Configure Cisco SD-WAN application-aware routing
- [THEORY] 4.5 Configure direct Internet access
- [THEORY] 5.3.a. DNS security
- [THEORY] 5.3.b. Secure Internet Gateway (SIG)
- [THEORY] 5.4 Configure QoS treatment on WAN Edge routers
- [THEORY] 5.1 Configure service insertion
- [THEORY] 5.2 Describe Cisco SD-WAN security features
- [THEORY] 5.2.a. Application-aware enterprise firewall
- [THEORY] 5.2.b IPS
- [THEORY] 5.2.c URL filtering
- [THEORY] 5.2.d AMP
- [THEORY] 5.2.e SSL and TLS proxy
- [THEORY] 5.3 Describe Cloud security integration
- [THEORY] 5.4.a Scheduling
- [THEORY] 5.4.b Queuing
- [THEORY] 6.1 Describe authentication, monitoring, and reporting from vManage
- [THEORY] 6.2 Configure authentication, monitoring, and reporting
- [THEORY] 6.3 Describe REST API monitoring
- [THEORY] 6.4 Describe software image management from vManage
- [THEORY] 5.4.c Shaping
- [THEORY] 5.4.d Policing
- [THEORY] 5.4.e Marking
- [THEORY] 5.4.f Per-tunnel and adaptive QoS
- [LAB] Lab#1: Configuration of Provider Network
- [LAB] Task1.1: Configure MPLS Router
- [LAB] Task1.2: Configure Internet
- [LAB] Task1.3: Configure 4G LTE
- [LAB] Task1.4: Configure ALPHA-HQ LTE
- [LAB] Lab#2: Initialization of vManage via CLI
- [LAB] Task2.1: Configure vManage System Parameters
- [LAB] Task2.2: Configure vManage VPN 0 Configuration
- [LAB] Task2.3: Configure vManage VPN 512 Configuration
- [LAB] Lab#3: Initialization of vBond via CLI
- [LAB] Task3.1: Configure vBond System Parameters
- [LAB] Task3.2: Configure vBond VPN 0 Configuration
- [LAB] Task3.3: Configure vBond VPN 512 Configuration
- [LAB] Lab#4: Initialization of vSmart via CLI
- [LAB] Task4.1: Configure vSmart System Parameters
- [LAB] Task4.2: Configure vSmart VPN 0 Configuration
- [LAB] Task4.3: Configure vSmart VPN 512 Configuration
- [LAB] Lab#5: Initialization of ETA Site vEdges via CLI
- [LAB] Task5.1: Configure vEdge1-ETA System Parameters
- [LAB] Task5.2: Configure vEdge1-ETA VPN 0 Configuration
- [LAB] Task5.3: Configure vEdge2-ETA System Parameters
- [LAB] Task5.4: Configure vEdge2-ETA VPN 0 Configuration
- [LAB] Lab#6: Initialization of GAMMA Site vEdges via CLI
- [LAB] Task6.1: Configure vEdge1-GAMMA System Parameters
- [LAB] Task6.2: Configure vEdge1-GAMMA VPN 0 Configuration
- [LAB] Task6.3: Configure vEdge2-GAMMA System Parameters
- [LAB] Task6.4: Configure vEdge2-GAMMA VPN 0 Configuration
- [LAB] Lab#7: Initialization of ZETA Site vEdge via CLI
- [LAB] Task7.1: Configure vEdge1-ZETA System Parameters
- [LAB] Task7.2: Configure vEdge1-ZETA VPN 0 Configuration
- [LAB] Lab#8: Initialization of DELTA Site vEdge via CLI
- [LAB] Task8.1: Configure vEdge1-DELTA System Parameters
- [LAB] Task8.2: Configure vEdge1-DELTA VPN 0 Configuration
- Lab#9: Configure Windows Server as CA Server
- [LAB] Task9.1: Configure Windows Server Network Adapter
- [LAB] Task9.2: Add CA Server role in Windows Server
- [LAB] Lab#10: Generate Root Certificate from CA Server
- [LAB] Task10.1: Complete basic initial configuration of vManage via GUI
- [LAB] Task10.2: Generate root certificate from CA server and Install it to vManage
- [LAB] Task10.3: Generate CSR from vManage
- [LAB] Task10.4: Issue Identity Certificate from CA Server
- [LAB] Task10.5: Install Identity Certificate to vManage
- [LAB] Lab#11: Add vBond to vManage and Generate Identity Certificate for vBond
- [LAB] Task11.1: Add vBond to vManage
- [LAB] Task11.2: Generate CSR from vBond
- [LAB] Task11.3: Issue Identity Certificate from CA Server
- [LAB] Task11.4: Install Identity Certificate to vBond
- [LAB] Lab#12: Add vSmart to vManage and Generate Identity Certificate for vSmart
- [LAB] Task12.1: Add vSmart to vManage
- [LAB] Task12.2: Generate CSR from vSmart
- [LAB] Task12.3: Issue Identity Certificate from CA Server
- [LAB] Task12.4: Install Identity Certificate to vSmart
- [LAB] Lab#13: Initialization of BETA Site cEdge via CLI
- [LAB] Task13.1: Configure cEdge1-BETA System Parameters
- [LAB] Task13.2: Configure cEdge1-BETA interface
- [LAB] Lab#14: Enable Tunnel Interface on VPN0 Interfaces
- [LAB] Task14.1: Enable Tunnel interface inside VPN0 on vManage, vBond, vSmart, vEdges /cEdges & allow service all, sshd and netconf
- [LAB] Lab#15: Uploading viptela.serial file to vManage
- [LAB] Task15.1: Upload viptela.serial file to vManage for registering vEdges and cEdges to vManage
- [LAB] Lab#16: Register vEdge/cEdge to vManage
- [LAB] Task16.1: Upload the Root certificate from vManage to vEdge/cEdge
- [LAB] Task16.2: Install the Root certificate on vEdges/cEdge
- [LAB] Task16.3: Activate vEdges/cEdge
- [LAB] Task16.4: Once vEdge/cEdge are activated, check control connections from all vEdges/cEdges
- [LAB] Lab#17: Configure Internal Routing on ETA|ZETA|DELTA|BETA Sites
- [LAB] Task17.1: Configure basic ip addressing and Enable OSPF routing on SW1-ETA & SW2-ETA
- [LAB] Task17.2: Configure Basic ip addressing and Enable BGP routing on SW1-DELTA & SW1-BETA
- [LAB] Task17.3: Adding Configuration for extra MPLS link added on DELTA Site
- [LAB] Lab#18: Configure Feature Templates
- [LAB] Task18.1: Configure Feature System template to be used by vEdges
- [LAB] Task18.2: Configure Feature VPN0 template to be used by vEdges
- [LAB] Task18.3: Configure Feature VPN0 Interface template (MPLS) to be used by vEdges
- [LAB] Task18.4: Configure Feature VPN0 Interface template (INT) to be used by vEdges
- [LAB] Task18.5: Configure Feature VPN0 Interface template (LTE) to be used by vEdges
- [LAB] Task18.6: Configure Feature VPN512 template to be used by vEdges
- [LAB] Task18.7: Configure Feature VPN512 Interface template to be used by vEdges
- [LAB] Task18.8: Configure Feature VPN100 template to be used by vEdges
- [LAB] Task18.9: Configure Feature VPN100 Interface template (SERVICE) to be used by vEdges
- [LAB] Task18.10: Configure Feature VPN100 OSPF template to be used by vEdges
- [LAB] Task18.11: Configure Feature VPN100 BGP template to be used by vEdges
- [LAB] Task18.12: Configure Feature OMP template to be used by vEdges
- [LAB] Lab#19: Configure Device Templates
- [LAB] Task19.1: Configure Device Template used by vEdge ETA1 & vEdge ZETA1
- [LAB] Task19.2: Attach Device Template to be used by vEdge ETA1 & vEdge ZETA1
- [LAB] Task19.3: Configure Variables in Device Template to be used by vEdge ETA1 & vEdge ZETA1
- [LAB] Task19.4: Apply Device Template to be used by vEdge ETA1 & vEdge ZETA1
- [LAB] Task19.5: Configure Device Template used by vEdge1-DELTA
- [LAB] Task19.6: Attach Device Template to be used by vEdge1-DELTA
- [LAB] Task19.7: Configure Variables in Device Template to be used by vEdge1-DELTA
- [LAB] Task19.8: Apply Device Template to be used by vEdge1-DELTA
- [LAB] Lab#20: Verification on vEdge ETA | ZETA | DELTA Site
- [LAB] Task20.1: Simulate traffic flow from vEdge1-ETA to vEdge1-ZETA
- [LAB] Task20.2: Simulate traffic flow from vEdge1-DETA to vEdge1-ZETA
- [LAB] Task20.3: Routing Table for VPN 100 shows all prefixes from all sites via OMP on vEdge1-ETA,vEdge1-ZETA, vEdge1-DELTA
- [LAB] Task20.4: Ping & Traceroute from DELTA Switch to ETA | ZETA LAN Segment
- [LAB] Lab21: Configure CLI Template
- [LAB] Task21.1: Configure vEdge ETA2 using CLI template
- [LAB] Task21.2: Attach Device Template to be used by vEdge ETA2
- [LAB] Task21.3: Configure Variables in Device Template to be used by vEdge ETA2
- [LAB] Task21.4: Apply Device Template to be used by vEdge ETA2
- [LAB] Lab22: Verification on vEdge-ETA2
- [LAB] Task22.1: Simulate traffic flow from vEdge2-ETA to vEdge1-ZETA
- [LAB] Task22.2: Routing Table for VPN 100 shows all prefixes from all sites via OMP on vEdge2-ETA
- [LAB] Task22.3: Ping & Traceroute from ETA2 Switch to ZETA LAN Segment
- [LAB] Lab23: Configure Feature Templates for CSR device
- [LAB] Task23.1: Configure Feature System template to be used by cEdge
- [LAB] Task23.2: Configure Feature VPN0 template to be used by CSR
- [LAB] Task23.3: Configure Feature VPN0 Interface template (MPLS) to be used by cEdge
- [LAB] Task23.4: Configure Feature VPN0 Interface template (INT) to be used by cEdge
- [LAB] Task23.5: Configure Feature VPN512 template to be used by CSR
- [LAB] Task23.6: Configure Feature VPN512 Interface template to be used by cEdges
- [LAB] Task23.7: Configure Feature VPN100 template to be used by cEdges
- [LAB] Task23.8: Configure Feature VPN100 Interface template (SERVICE) to be used by cEdges .
- [LAB] Task23.9: Configure Feature VPN100 BGP template to be used by cEdges
- [LAB] Task23.9: Configure Feature OMP template to be used by cEdges
- [LAB] Lab24: Configure Device Template for cEdge
- [LAB] Task24.1: Configure Device Template used by cEdge ETA2
- [LAB] Task24.2: Attach Device Template to be used by cEdge BETA1
- [LAB] Task24.3: Configure Variables in Device Template to be used by cEdge BETA
- [LAB] Task24.4: Apply Device Template to be used by cEdge BETA1
- [LAB] Lab25: Verification on cEDGE1-BETA
- [LAB] Task25.1: Checking outbound-connections on cEDGE1-BETA and vEdge1-DELTA
- [LAB] Task25.2: Verifying routes on SW1-BETA from other sites LAN Segment
- [LAB] Task25.3: Ping & Traceroute from SW1-BETA to ZETA|ETA LAN Segments
- [LAB] Lab26: Advertising TLOC EXT subnets in service provider networks
- [LAB] Task26.1: Advertised TLOC EXT Subnets on HQ1-ALPHA, MPLS and INTERNET
- [LAB] Task26.2: Update Lab Diagram on GAMMA Site as per below Diagram
- [LAB] Task26.3: Configure basic ip addressing and Enable OSPF routing on SW1-GAMMA
- [LAB] Lab27: TLOC Extension Lab on GAMMA SITE
- [LAB] Task27.1: Configure Feature VPN0 template to be used by vEdge1-GAMMA & vEdge2-GAMMA
- [LAB] Task27.2: Configure Feature VPN0 Interface template (Extension-Interface) to be used by vEdges GAMMA1 & GAMMA2
- [LAB] Task27.3: Configure Feature VPN0 Interface template (Tunnel-Interface) to be used by v Edges GAMMA1 & GAMMA2
- [LAB] Lab28: Configure Device Templates for GAMMA1 and GAMMA2
- [LAB] Task28.1: Configure Device Template used by vEdge1-GAMMA
- [LAB] Task28.2: Attach Device Template to be used by vEdge1-GAMMA
- [LAB] Task28.3: Configure Device Template used by vEdge2-GAMMA
- [LAB] Task28.4: Attach Device Template to be used by vEdge2-GAMMA
- [LAB] Lab29: Verification on vEdge1-GAMMA & vEdge2-GAMMA
- [LAB] Task29.1: Checking omp tloc-advertised on vEdge1-GAMMA & vEdge2-GAMMA
- [LAB] Task29.2: Checking omp tloc-paths on vSmart
- [LAB] Lab30: VRRP Lab on GAMMA SITE
- [LAB] Task30.1: Configure Feature vEdge-VPN100-SERVICE G0/3 template for VRRP to be used by vEdge1-GAMMA & vEdge2-GAMMA
- [LAB] Task30.2: Configure Device Template and replace existing vEdge-VPN100-SERVICE-G0/3 by newly created VRRP Template (vEdge-VPN100-VRRP-SERVICE-G0/3) used by vEdge1-GAMMA
- [LAB] Task30.4: Configure Device Template and replace existing vEdge-VPN100-SERVICE-G0/3 by newly created VRRP Template (vEdge-VPN100-VRRP-SERVICE-G0/3) used by vEdge2-GAMMA
- [LAB] Task30.5: Verification of VRRP on vEdge1-GAMMA & vEdge2-GAMMA
- [LAB] Lab31: Verify current Mode on vSmart (CLI / vManage) and apply a template if required
- [LAB] Task31.1: Verify current mode on vSmart (CLI / vManage)
- [LAB] Task31.2: Configure System Feature Template for vSmart
- [LAB] Task31.3: Configure VPN0 Feature Template for vSmart
- [LAB] Task31.4: Configure VPN0 Interface Feature Template for vSmart
- [LAB] Task31.5: Configure VPN512 Feature Template for vSmart
- [LAB] Task31.5: Configure VPN512 Interface Feature Template for vSmart
- [LAB] Task31.6: Configure Device Template for vSmart
- [LAB] Task31.7: Attach Device Template to be used by vSmart
- [LAB] Task31.8: Configure Variables in Device Template to be used by vSmart
- [LAB] Task31.9: Apply Device Template to be used by vSmart
- [LAB] Task31.10: Verify new mode on vSmart (CLI / vManage)
- [LAB] Lab32: Control Plane Policy – Blocking Subnets
- [LAB] Task32.1: Create Lists
- [LAB] Task32.2: Create Topology (Control Policies)
- [LAB] Task32.3: Add Policy
- [LAB] Task32.4: Pre-Verification // Verify routes from Delta LAN Segment to SW2-ETA
- [LAB] Task32.5: Activate the policy
- [LAB] Task32.6: Post-Verification || Verify routes from Delta LAN Segment to SW2-ETA
- [LAB] Lab33: Data Plane Policy – Blocking Telnet Access
- [LAB] Task33.1: Create Lists
- [LAB] Task33.2: Create Traffic Rules (Data Policies)
- [LAB] Task33.3: Pre-Verification // Verify telnet from Delta Site to Zeta Site
- [LAB] Task33.4: Activate the policy .
- [LAB] Task33.5: Post-Verification // Verify telnet from Delta Site to Zeta Site
- [LAB] Lab34: Hub & Spoke Topology
- [LAB] Task34.1: Create Lists .
- [LAB] Task34.2: Create Topology (Hub & Spoke Policy)
- [LAB] Task34.3: Add Policy
- [LAB] Task34.4: Activate the policy
- [LAB] Task34.5: Post-Verification || Verify Routes Again
- [LAB] Task34.6: Copy & Configure Feature VPN100 template to be used by vEdge1-Delta
- [LAB] Task34.7: Edit Device Template used by vEdge1-DELTA
- [LAB] Lab35: Application Aware Routing
- [LAB] Task35.1: Create Lists
- [LAB] Task35.2: Create Traffic Rules (Data Policies)
- [LAB] Task35.3: Add Policy
- [LAB] Task35.4: Pre-Verification || Verify path from ZETA to DELTA Site
- [LAB] Task35.5: Activate the policy
- [LAB] Task35.6: Post-Verification || Verify path from ZETA to DELTA Site after Policy
- [LAB] Task35.7: Post-Verification After SLA breached|| Verify path from ZETA to DELTA Site after Policy
Watch Our Demo Class:
We conducted SDWAN three Demo classes in Feb 2021 and below are the recorded videos to watch and go through Demo class:
Demo#1 Video || CCNP Encor+Enars Enterprise
Demo#2 Video || CCIE Lab Enterprise
Demo#3 Video || SDWAN 300-415
Implementing Cisco SD-WAN Solutions v1.0 (300-415) : Download syllabus blueprint (PDF)