CISCO Intelligent WAN (IWAN) – WorkshopThe Intelligent WAN (IWAN) is the new-generation WAN solution from Ciscoclassified as a Sofware-Defined WAN (SD-WAN).

The implementation, configuration, troubleshooting, operation and reporting are taken care of by a controller, in the case of this training APIC-EM and Liveaction.

This new software-defined approach opens the door to a world of business opportunities, the reduction of CAPEX and OPEX of the network department with no trade-offs. On the contrary, it will bring with it an improvement in quality, reliability and flexibility, all of that supported by the automation and the programing of the networks.

• To explore and understand the underlying IWAN technologies (DMVPN, mGRE and IPSec, PfRv3)
• To deep dive into DMVPN, mGRE and IPSec, PfRv3 and learn how to configure them in the context of DMVPN
• To understand the way IWAN is routing the traffic (EIGRP, BGP and PfRv3)
• To learn how to use APIC-EM to provision an IWAN network with a zero touch deployment
• To build configuration and troubleshooting experience as well asconfidence based on practice in the lab.

Day 1Transport-independent IWAN design with DMVPN

• IWAN overview

• Generic Routing Encapsulation (GRE) Tunnels

• Multi Generic Routing Encapsulation (mGRE) Tunnels

• Next Hop Resolution Protocol (NHRP)

• The different phases of Dynamic Multipoint VPN (DMVPN)

-Phase 1: Spoke-to-Hub

-Phase 2: Spoke-to-Spoke

-Phase 3: Hierarchical Tree Spoke-to-Spoke

• DMVPN and IPsec
  -DMVPN without IPsec
  -DMVPN with IPsec in Transport Mode
  -DMVPN with IPsec in Tunnel Mode
  -NAT and IPsec

• Configuring DMVPN

• Operating and troubleshooting DMVPN

-DMVPN Failure Detection and High Availability

-NHRP Redundancy

-NHRP Traffic Statistics

-DMVPN Tunnel Health Monitoring

-DMVPN Dual-Hub and Dual-Cloud Designs

-Backup Connectivity via Cellular Modem

-IWAN DMVPN Guidelines

Lab: Configuration and troubleshooting DMVPN

Day 2

Intelligent WAN (IWAN) Routing part 1

• Routing Protocol Overview

-Multihomed and WAN Routing

-Route Summarization

-Traffic Engineering for DMVPN and PfR

• EIGRP for IWAN

-EIGRP Stub Sites on Spokes

-EIGRP Summarization

-EIGRP Traffic Steering

-Advanced EIGRP Site Selection

• Border Gateway Protocol (BGP) for IWAN

-BGP Routing Logic

-Default Route Advertisement into BGP

-Changing BGP Administrative Distance

-BGP Route Advertisement on Hub Routers

-BGP Route Filtering

-Redistribution of BGP into OSPF

-Advanced BGP Site Selection

• Configuring Front-Door Virtual Route Forwarding (FVRF)
• Direct Internet Access (DIA)
• Multicast Routing

-Protocol Independent Multicast (PIM)

-Rendezvous Points

-Source Specific Multicast (SSM)

-IWAN Multicast Configuration

-Hub-to-Spoke Multicast Stream

-Spoke-to-Spoke Multicast Traffic

Lab: Configuration and troubleshooting DMVPN routing

Day 3

Intelligent WAN (IWAN) Routing part 2

• PfRv3 Provisioning

-IWAN Domain

-Topology

-PfR Configuration

-Advanced Parameters

-Path Selection

• Migration options
• Example of migration

-Migrating from a Dual MPLS to a Hybrid IWAN Model

-Migrating IPsec Tunnels

-PfRv3 Deployment

• Routing operations and troubleshooting

-Single-Router Branch Sites

-Multiple-Router Branch Sites

-Advertisement on DMVPN Hub Routers

-DMVPN Hub LAN Connectivity Health Check

-Traffic Steering

-Recursive Routing Problems

-Outbound Interface Selection

-Modify the SPT Threshold in multicast

-Modify the Multicast Routing Table

-Checking the Hub Site configured with PfR

-Checking the Transit Site configured with PfR

-Check the Branch Siteconfigured with PfR

-Monitoring PfROperations

-Microloops on IWAN

-Troubleshooting tips

Lab: Configuration and troubleshooting IWAN advanced routing

Day 4

IWAN intelligent path control

• Application Recognition

-NBAR2 Application Recognition

-NBAR2 Operation and Functions

-NBAR2 Protocol Discovery

-NBAR2 Visibility Dashboard

-Validation and Troubleshooting

• Application Visibility

-Performance Metrics

-Flexible NetFlow

-Deployment Considerations

• Intelligent WAN Quality of Service (QoS)

-Ingress QoS NBAR-Based Classification

-Ingress LAN Policy Maps

-Egress QoS DSCP-Based Classification

-Egress QoS Policy Map

-Hierarchical QoS

-DMVPN Per-Tunnel QoS

-QoS and IPSec Packet Replay Protection

-QoS Configuration

Demo LiveAction 5.2

LiveAction 5.2 for IWAN Management and PfRv3 Deployment v1

>Day 5

Automating and operating IWAN

• Data models and supporting protocols

-YANG Data Models

-NETCONF

-ConfD

• Application Policy Infrastructure Controller Enterprise Module (APIC-EM)

-APIC-EM Architecture

-APIC-EM applications

-IWAN applications

-Plug and Play (PnP) Application

-Path Trace application

• APIC-EM Programmability Examples Using Postman

-Ticket API

-Host API

-Network Device API

-User API

• APIC-EM Programmability examples using Python

-Ticket API

-Host API

• IWAN zero-touch deployment with APIC-EM PnP and IWAN

Lab: APIC-EM IWAN Application Lab