Complete Teaching Of Cisco Sd-Wan ( Ensdwi 300-415 )

Software Defined Wide Area Network

What you'll learn

Introduction to Cisco Software-Defined Wide Area Networking (SD-WAN)

Cisco SD-WAN Components

Control Plane and Data Plane Operations

Onboarding and Provisioning

Introduction to Cisco SD-WAN Policies

Centralized Control Policies

Centralized Data Policies

Application-Aware Routing Policies

Localized Policies

Cisco SD-WAN Security

Cisco SD-WAN Cloud onRamp

Cisco SD-WAN Design and Migration

Provisioning Cisco SD-WAN Controllers in a Private Cloud

Requirements

You can implement scenarios of this course in EVE-NG emulator.

Description

The Implementing Cisco SD-WAN Solutions (ENSDWI) course trains you to design, deploy, configure, and manage your Cisco® Software-Defined WAN (SD-WAN) solution in a large-scale live network, including how to migrate from legacy WAN to SD-WAN. You will learn best practices for configuring routing protocols in the data center and the branch, as well as how to implement advanced control, data, and application-aware policies. The course also covers SD-WAN deployment and migration options, placement of controllers, how to deploy WAN Edge devices, and how to configure Direct Internet Access (DIA) breakout. The course examines the different Cisco SD-WAN security options available, such as application-aware enterprise firewall, Intrusion Prevention System (IPS), URL filtering, Cisco Advanced Malware Protection (AMP), Secure Sockets Layer/Transport Layer Security (SSL/TLS) proxy, and Cisco Umbrella® Secure Internet Gateway (SIG).The course lab environment is built using Cisco vEdge Cloud routers and Cisco SD-WAN  code.This course helps you prepare to take the Implementing Cisco SD-WAN Solutions (300-415 ENSDWI) exam which is part of the CCNP® Enterprise certification. This course will teach you to use Cisco SD-WAN to:Establish a transport-independent WAN for lower cost and higher flexibilityMeet Service Level Agreements (SLAs) for business-critical and real-time applicationsProvide secure end-to-end segmentation for protecting critical enterprise compute resourcesExtend seamlessly into the public cloudOptimize the user experience for Software-as-a-Service (SaaS) applications

Overview

Section 1: Cisco SD-WAN

Lecture 1 Traditional Routing Review and Component of Traditional Router

Lecture 2 Distributed Routing , SDWAN Components , Types of Secure Connections in SD-WAN

Lecture 3 SD-WAN Terminology , TLOC , OMP , System IP and Color

Lecture 4 OMP Routes , OMP TLOC Routes , How They Work together

Lecture 5 TLOC Colors , Private and Public IP Address Differences and Usages

Lecture 6 NAT Traversal and Session Traversal Utilities for NAT [ STUN ]

Lecture 7 Data Plane Encryption , Pairwise Key , Key Exchange with vSmart

Lecture 8 Network Segmentation in SD-WAN , VPN Label , SDWAN Packet , VPN Label Usage

Lecture 9 Restrict Option in Transport LOCation [TLOC]

Lecture 10 SD-WAN Site-ID and one of its usage

Lecture 11 OMP Administrative Distance and Route Redistribution and Loop Prevention

Lecture 12 How to take a WAN-Edge List from Cisco Software Portal

Lecture 13 Import Controllers Images to EVE-NG

Lecture 14 Active Directory Installation and Certificate Server Installation

Lecture 15 vManage , vBond , vSmart Bootstrap Configuration & Import Root CA Certification

Lecture 16 vManage Certification , Add Controllers to vManage and Certification

Lecture 17 WAN-Edges Bootstrap Configuration , Add to vManage and Certification

Lecture 18 Monitoring Control connections and Data Connections with CLI and GUI

Lecture 19 SD-WAN Configuration Template , Device Template , Feature Template

Lecture 20 Configuration of Templates and Check Connectivity between Sites

Lecture 21 vEdge Basic Configuration and Service Side Connectivity Part-1

Lecture 22 vEdge Basic Configuration and Service Side Connectivity Part-2

Lecture 23 cEdge Basic Configuration and Service Side Connectivity Part-1

Lecture 24 cEdge Basic Configuration and Service Side Connectivity Part-2

Lecture 25 vEdge cEdge Virtual Router Redundancy Protocol [VRRP] Template

Lecture 26 vEdge cEdge Configuration Template and Routing Protocols in Service Side

Lecture 27 vEdge cEdge Configuration Template and Segmentation

Lecture 28 SD-WAN Tunnel Group

Lecture 29 SD-WAN Policy Introduction and Types

Section 2: SD-WAN Centralized Control Policy

Lecture 30 Hub and Spoke Topology

Lecture 31 Branch to Branch Communication Through DC

Lecture 32 Traffic Engineering

Lecture 33 Preferring Regional Data Centers

Lecture 34 Regional Mesh Network

Lecture 35 Enforcing Security Perimeters with Service Insertion

Lecture 36 Isolating Guest Users from the Corporate WAN

Lecture 37 Creating Different Network Topology per Segment

Lecture 38 Creating Extranets and Access to Shared Services

Section 3: SD-WAN Centralized Data Policy

Lecture 39 Direct Internet Access [ DIA ] for Guest Users

Lecture 40 Protecting Applications from Packet Loss

Lecture 41 Application-Aware Routing Policies

Section 4: SD-WAN Localized Control Policy

Lecture 42 Localized Control Policy

Section 5: SD-WAN Localized Data Policy

Lecture 43 Localized Data Policy ( ACL , QOS )

Section 6: SD-WAN Security

Lecture 44 Application-Aware Enterprise Firewall

Lecture 45 Intrusion Detection and Prevention [IDS-IPS]

Lecture 46 URL Filtering

Lecture 47 Advanced Malware Protection and Threat Grid

Lecture 48 DNS Web Layer Security

Lecture 49 Cloud Security

Lecture 50 vManage Hardening

Section 7: SD-WAN Cloud onRamp

Lecture 51 Cloud onRamp for SaaS

Lecture 52 Cloud onRamp for IaaS

Lecture 53 Cloud onRamp for Colocation

Section 8: Cisco SD-WAN Use cases

Lecture 54 Cisco SD-WAN Use cases

Section 9: Cisco SD-WAN Architecture and Components

Lecture 55 Cisco SD-WAN Architecture and Components

Section 10: SD-WAN TLOC Extension

Lecture 56 TLOC Extension with Physical Interfaces

Lecture 57 TLOC Extension with Sub Interfaces

Section 11: Cisco SD-WAN DataCenter Design

Lecture 58 Direct Transport Side

Lecture 59 Indirect Transport Side

Section 12: Cisco SD-WAN Loopback TLOC Design

Lecture 60 Standard Mode

Lecture 61 Bind Mode

Section 13: Cisco SD-WAN Branch Design

Lecture 62 Single Router L2 Branch

Lecture 63 Single Router L3 Branch

Lecture 64 Dual Router L2 Branch

Lecture 65 Dual Router L3 Branch

Section 14: SD-WAN White-Lists and Certificate Authentication Process

Lecture 66 White-Lists and Certificate Authentication Process

Section 15: SD-WAN Laboratory

Lecture 67 Controller's Site Setup

Lecture 68 DC and Branch 's Site Setup

Lecture 69 Feature and Device Templates

Lecture 70 Case 1 - Isolating Remote Branches from Each Other

Lecture 71 Case 2 - Enabling Branch-to-Branch Communication Through Data Centers

Lecture 72 Case 3 - Traffic Engineering at Sites with Multiple Routers

Lecture 73 Case 4 - Preferring Regional Data Centers for Internet Access

Lecture 74 Case 5 - Regional Mesh Networks

Lecture 75 Case 6 - Enforcing Security Perimeters with Service Insertion

Lecture 76 Case 7 - Isolating Guest Users from the Corporate WAN

Lecture 77 Case 8 - Creating Different Network Topologies per Segment

Lecture 78 Case 9 - Creating Extranets and Access to Shared Services

Lecture 79 Case 10 - Direct Internet Access for Guest Users

Lecture 80 Case 11 - Direct Cloud Access for Trusted Application

Lecture 81 Case 12 - Application-Based Traffic Engineering

Lecture 82 Case 13 - Protecting Corporate Users with a Cloud-Delivered Firewall

Enterprise Network Engineers