Presenter mode

SD-WAN underlay/overlay

Full page · Paths

Walkthrough

Control plane over VPN 0

WAN Edge reaches Validator/Controller/Manager over the VPN 0 underlay. Service VPNs do not replace transport reachability.

Step 1 / 3
WAN EdgeValidatorbring-upController (OMP)OMP RRManagerVPN 0 underlay

Vendor banner: Cisco Catalyst SD-WAN roles — Manager (management), Controller (OMP RR / keys), Validator (orchestration). WAN Edge is the site data plane.

Walkthrough

Site-to-site overlay over colored TLOCs

Branch LAN → WAN Edge → IPsec over a TLOC color → remote Edge → DC LAN. TLOC = system-IP + color + encapsulation.

Step 1 / 3
Branch LANBranch EdgeTLOC · MPLScolorTLOC · InternetcolorDC EdgeDC LAN

Each transport attachment is a TLOC: system IP + color (e.g. MPLS vs Internet) + encapsulation (IPsec or GRE). OMP uses TLOCs as next hops.

Walkthrough

Transport color failure → alternate TLOC

When one colored transport fails, overlay can move to another TLOC if policy/SLA allows. VPN 0 and BFD health matter.

Step 1 / 3
Branch LANBranch EdgeTLOC · MPLSTLOC · InternetDC EdgeDC LAN

Steady state: dual colors (MPLS + Internet) with IPsec overlays. Policy may prefer MPLS for the service VPN flow.