Cisco SD-WAN Control Plane Architecture: NAT-Traversal Component

NAT-Traversal Component

Question

Which component of the Cisco SD-WAN control plane architecture should be located in a public Internet address space and facilitates NAT-traversal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C.

https://www.cisco.com/c/dam/global/da_dk/assets/pdfs/cisco_virtual_update_cisco_sdwan_viptela.pdf

The correct answer is B. vSmart.

In Cisco SD-WAN, the control plane architecture consists of four components: vBond, vSmart, vManage, and WAN Edge. Each component plays a critical role in the overall architecture, and each has its own specific function.

vBond is the orchestrator of the control plane and responsible for establishing secure DTLS tunnels between the components. vManage provides centralized management and monitoring of the entire SD-WAN network. WAN Edge is the device that performs the data plane functions of the SD-WAN, including forwarding traffic across the overlay network.

The vSmart controller is responsible for the control plane intelligence of the SD-WAN. It is where the SD-WAN policies and business rules are defined and enforced. The vSmart controller communicates with the vBond orchestrator and the WAN Edge devices to determine the best path for traffic across the overlay network.

One important characteristic of SD-WAN is the ability to operate over any type of WAN link, including the public Internet. To facilitate NAT-traversal, the vSmart controller should be located in a public Internet address space. This allows the vSmart controller to communicate with other SD-WAN components, even when they are located behind NAT devices.

Therefore, option B. vSmart is the component of the Cisco SD-WAN control plane architecture that should be located in a public Internet address space and facilitates NAT-traversal.