วีดีโอ

Site 300 has two SD-WAN routers: BR1-vEdge1 and BR1-vEdge2. Each router is physically connected to one transport, but we use the feature called "Tloc Extension", which will extend MPLS transport from BR1-vEdge1 to BR1-vEdge2. So, BR1-vEdge2 will "think", it has two transports, not one.

Right now you can add CSR1k manually. Not via SD-WAN Lab Tool automation. I would recommend using C8kv. The difference between C8kv and CSR1k are not big, in fact, we use the same code base and renamed it. You can also upgrade CSR1k to C8kv. So, it was not much difference in the past and the benefit of using C8kv now is all new features introduced recently. And I am not aware of any use case, which is possible with CSR1k and not possible with C8kv.

SD-WAN Router will get routing updates and policies from vSmart (now called Cisco Catalyst Controller) and router configuration from vManage (now called Cisco Catalyst SD-WAN Manager). So, yes, you both are correct - SD-WAN router is getting routing updates / policies from vSmart and device-level config from vSmart. 🙂

@@NikolaiPitaev thank you for the clarification. I was looking at the SD-wan fabric as hierarchical. Vsmart >>>>Vmanage>>>edge where all changes and updates made at Vsmart is pushed to edges from Vmanage. Now I realize permanent connections are made to the edge from Vmanage/Vsmart. Thank you for the clarification. 👍🏾👍🏾👍🏾👍🏾

Yes, use the csdwan add 1 edge <sw version>

@@CiscoSDWANandCloudNetworking I receive following error while trying to add a cEdge using advised command. Do I need to procure license? Error: "Preparing add task...Cannot onboard 1 WAN Edges as there are only 0 unused UUIDs available."

it was due to internet connectivity, i guess. But, csdwan add 1 edge only adds a cat 8000v edge. I need a cEdge catalyst syntax is different than cEdge. Many commands does not work

The refplat-20240322-supplemental-iso.zip that is available under 2.7.0 release has the SD-WAN images included. Which SD-WAN software version did you use? The IP addresses should be auto configured by the script based on the input variables you provide.

@@TomaszZarski thanks! got the image now. But there is another issue. When I run the lab on my ESXi 8 based server, external connectivity does not work properly. If bridged, vManage is not reachable. If NAT (virbr0) is used, vManage can reach external IP addresses via vpn512, but from external IP of my home network I can not reach vManage. However this issue does not exist if I start the lab on my laptop with Vmware Workstation. Is there any ESXi specific tuning required to get the external connectivity working. My laptop does not have capacity run the lab. My ESXi network is very basic. One external connection and VMs are all connected to the same vSwitch with default settings. No tagging/trunking anywhere in uplink or downlinks.

Yes please

Yes

Thanks for the feedback! Will work on it!

yes please!

@@surya8180 Thanks for your feedback! Working on this! 🙂

So just to add, if your deployment is stuck on Waiting for SD-WAN Manager API - pop into the VLAN you are using in VMWARE and within security enable Promiscuous. I actually ticked all three to enable. The other gotcha is, if you are like me you rush before you can crawl and common sense is lost on you (like me) ... Ensure your IP address for your manager is routable, I put it in the same subnet once I realised it has to be live to carry on the with the script.

This means the script was unable to login to SD-WAN Manager over HTTPS. Please verify reachability and rerun the tool with “-- retry” option. It should attempt to connect again to SD-WAN Manager and if it’s successful, it will continue the onboarding. If you will still face problems, feel free to contact us using e-mail in the video description.

@@TomaszZarski Looks like the --retry option worked, not sure if it mattered, but I first logged into the manager via https in the browser, then went back and used the script again and it connected without issue.

for anyone who may need it. I had to install python3.11 (I had 3.12), and manually install pyats23.11. then it started working.

​@@arielgustavoherediaoliva8465 we've just released version 2.0.10 with python3.12 support!

Before using the tool, you need to make sure your CML server is already licensed.

@@TomaszZarski yes It is!. I was asking about the SD wan licenses here.

@@arielgustavoherediaoliva8465 You will be able to use c8kv without need to bring your own SD-WAN license. 🙂

Yes the tool will take care of all steps required for SD-WAN onboarding.

@@TomaszZarski thanks!

Please drop an email to cml-sdwan-lab-tool@external.cisco.com and provide a screen shot or an error message, which you face. Thanks!

Windows is not natively supported, the only way to run the tool on Windows is by using either Linux on Windows with WSL or a linux VM or container. You can read more here: github.com/cisco-open/sdwan-lab-deployment-tool/blob/dev-2.0.10/README.md

Thanks! Please let us know how it works! 🙂

Yes, you can have them in the same region.

therefore we could have deployment with active and backup in EU UK | London ?@@CiscoSDWANandCloudNetworking

hello if an customer wants to install their own certs will this impact on how the edge routers authenticate to the Manager ? I mean the Edge routers will not use the embedded Cisco certs or how will this work ? @@CiscoSDWANandCloudNetworking

Only SD-WAN Manager and Validator (formerly known as vManage and vBond respectively) are required for non-SDWAN routers. For more details on this feature, please go through the documentation: www.cisco.com/c/en/us/td/docs/routers/C8000V/Configuration/c8000v-installation-configuration-guide/managing-the-device-using-vmanage.pdf

This demo is using an engineering preview for 20.13 Software, which is built with the new magnetic UI. I hope, you like it! 🙂

Thanks for your quick reply. Looks really good. When is 20.13 expected to go out? I have customers running 20.12 right now@@NikolaiPitaev

I hope Cisco will standardize on magnetic ui on all products asap, ISE is there with 3.3, SDWAN soon, FMC later ?@@NikolaiPitaev

part 2 is posted... part 3 will be posted soon thanks

Please refer to this documentation link: www.cisco.com/c/en/us/td/docs/routers/sdwan/release/notes/compatibility-and-server-recommendations/ch-hypervisor-comp-vb-vs-vm-vcloud.html

Policy related changes can be expected in upcoming releases. And Cisco Certification exams (300-415) topics related to templates/policies will not be updated anytime soon.