SD-WAN - Presentation - v2.0 With Example and Defination
SD-WAN - Presentation - v2.0 With Example and Defination
The traditional WAN (wide-area network) function was to connect users at the branch
or campus to applications hosted on servers in the data center. Typically, dedicated
MPLS circuits were used to help ensure security and reliable connectivity.
What is SD-WAN?
SD-WAN is a software-defined approach to
managing the WAN. It is a virtual WAN
architecture that allows enterprises to
leverage any combination of transport
services—including MPLS, LTE and broadband
internet services.
Why SD-WAN?
The SD-WAN represents an evolution of networking from an older, hardware-based model to a
secure, software-based, virtual IP fabric. It gives users the ability to manage connectivity across
their WAN from a single dashboard with greater speed, reliability, and efficiency.
● End-to-end visibility into applications and infrastructure across the entire SD-WAN fabric
● Real-time information for failure correlation, cross-customer benchmarking, and application
performance scores
● Assistance planning application provisioning, bandwidth increases, and branch expansions
● Intelligent recommendations based on existing policies, templates, and preferences
● Application quality of service (QoS) categorization and policy changes for predictable
performance
Simplified management
More security
With five simple steps, the Cisco SD-WAN virtual IP fabric transforms a complex legacy
network into an easy-to-manage, scalable network:
Benefits:
● The network administrator can choose transport circuits
based on SLA and cost
● The routing system can assign attributes to transport
links for optimal routing, load balancing, and policy-
based routing
Benefits:
● The centralized controller can use inexpensive or
commodity servers for control plane processing.
● Work like route reflector in BGP
● The network administrator can create multiple segments
without the need for complex signaling protocols. For
example, in the figure here. prefixes can be part of one
VPN, while all prefixes can be part of a different VPN.
Benefits:
● The Cisco SD-WAN fabric identifies transport side links and automatically encrypts traffic between sites.
● The associated encryption keys are exchanged over a secure session with the centralized controller.
● Secure DTLS/TLS sessions with the controller are set up automatically using RSA and certificate infrastructure.
● The Cisco SD-WAN fabric itself authenticates all devices participating in the network, which is an important
step to secure the infrastructure.
● The fabric automatically exchanges encryption keys associated with the transport links, eliminating the hassle of
configuring thousands of pairwise keys.
Benefits:
● Policy configured on a centralized controller
strongly influences how prefixes are advertised
among the routers.
Benefits:
● The Cisco SD-WAN SEN centralizes and significantly simplifies provisioning and management through
the vManage Network Management System (NMS).
● The vManage NMS provides an easy-to-use, graphical dashboard from which you can monitor, configure,
and maintain all Cisco vEdge devices and links in the overlay network.
● The network administrator provisions and manages the network as a whole, efficiently and easily, as
opposed to a piecemeal approach that deals with individual devices one at a time.
● The network administrator has improved network visibility (for example, viewing network-wide VPN
statistics) from a single point.
❖ Analytics: vAnalytics
❖ Licensing
❖ Implementation/Deployment
❖ Maintenance Experience