An engineer modifies a data policy for DIA in VPN 67. The location has two Internet-bound circuits. Only the web browsing traffic must be admitted for DI
How is the scalability of the vManage increased in Cisco SD-WAN Fabric?
Refer to the exhibit.
An engineer is creating a policy for VPN1 users. Their scavenger traffic at site 101 must pass through a firewall. Which two match conditions must be selected to enable this policy? (Choose two.)
Which type of connection is created between a host VNet and a transit VNet when configuring Cloud OnRamp for laaS?
Which control policy assigned to Drenches in the out direction establishes a strict hub-and-spoke topology tor VPN2?
A)
B)
C)
D)
To establish a strict hub-and-spoke topology in Cisco SD-WAN for a specific VPN, such as VPN2, a control policy must be configured. This control policy dictates how traffic flows between sites, ensuring that all branch traffic is routed through the hub site.
1.Control Policy Components:
oSite Lists: Define which sites are considered hubs and which are branches.
oVPN Lists: Identify the VPNs to which the policy applies.
oControl Policy: Use sequences to match routes and specify actions to accept or reject traffic based on the defined topology.
1.Policy Analysis:
oOption A: Correctly defines site lists for hub sites (site-id 1-2) and creates a control policy that matches routes for VPN2, accepting routes from hub sites and rejecting routes from others. This ensures that traffic from branches (other sites) is only accepted if it routes through the hubs.
oOther options either incorrectly define the site lists or do not properly match and set the routes to enforce the strict hub-and-spoke topology.
1.Policy Configuration:
policy
lists
vpn-list VPN2
vpn 2
site-list hub_sites
site-id 1-2
!
control-policy vpn_multi_topology
sequence 10
match route
site-list hub_sites
vpn-list VPN2
!
action accept
!
sequence 20
match route
vpn-list VPN2
!
action reject
!
default-action accept
1.Reference:
oCisco SD-WAN Control Policy Configuration Guide
oCisco SD-WAN Hub-and-Spoke Topology Deployment Guide
Tracey
26 days agoGretchen
2 months agoCasandra
3 months agoAmmie
3 months agoLaticia
4 months agoReed
5 months agoJill
5 months agoMacy
5 months agoNieves
6 months agoArdella
6 months agoChristene
6 months agoDaniel
7 months agoDino
7 months agoRaul
7 months agoIvory
7 months agoSharen
8 months agoOctavio
8 months agoLarae
8 months agoAndrew
8 months agoDorian
8 months agoKristal
9 months agoArlen
10 months agoPaola
10 months agoTomas
10 months agoElsa
10 months ago