Before you begin | Cisco SWAT SD-WAN Lab Guide

Prerequisites

What will you need?

A workstation with Windows or MacOS installed
Cisco AnyConnect. This can be downloaded from here if connected to the GHI DC or here if connected to the SJC DC, after logging in with the credentials provided
A stable internet connection that has standard Cisco AnyConnect ports allowed

Note: It is recommended to open this Lab Guide on one screen and perform lab activities on another

Important: It is HIGHLY recommended to use Google Chrome. Download the Clipboard Permission Manager Extension for Chrome. While accessing the POD via Guacamole, allow Clipboard Permission Manager access and you will be able to copy-paste content directly into the Guacamole window (Guacamole has an inconvenient way of handling copy-paste operations).

What should you know?

Fundamental knowledge of Routing & Switching with a few details of Data Center operations
Familiarity with Cisco SD-WAN as a solution and its architecture/protocols. A few helpful links can be found in the top navigation bar under SD-WAN Documentation
Knowledge of Cisco WAAS and NGIPS concepts is an added advantage

Objectives

What will you learn?

This lab has multiple use cases that are covered as part of the tasks. We are working on expanding this list as and when new features are tested/released.

Deploying vEdges and cEdges in a virtual environment
Onboarding devices on vManage
- Manual Onboarding of vEdges and cEdges
- Day 0 bootstrapping of cEdges
Working with Configuration Templates
- Bringing up cEdges and vEdges with Single uplinks
- Bringing up cEdges and vEdges with Dual uplinks
Implementing Service VPNs and Dynamic Service Side routing using OSPF and EIGRP
- Establishing OSPF adjacencies at DC with route redistribution
- Establishing EIGRP adjacencies at Site 40 with route redistribution
- Configuring VRRP at Site 50
Implementing TLOC Extensions with eBGP Peering
Working with Control Policies
- Enforcing a Hub and Spoke Topology
- Implementing a Regional Hub
Implementing Data Policies
- Custom traffic Engineering
- Direct Internet Access
Application Aware Routing
- Influencing Traffic Path selection
- Introducing Packet Loss via Policers
Cisco SD-WAN Security
- IPS Deployment at DIA Sites
- URL Filtering at DIA Site
- Cisco SD-AVC
Cloud On-Ramp for SaaS
- Injecting delay via a traffic shaper

Happy Labbing!