Cisco SDWAN: Onboarding vEdge Routers - Exploring Zero Touch Provisioning

[@TerryVinsonCCIEx2]

In this episode we are going to look deploying a Viptela Edge Router (vEdge) 00:00 Introduction 00:20 vEdge Lecture (tl;dr) 03:38 Lab Overview 09:18 Manually Deploy DC-vEdge1 24:48 Deploy DC-vEdge2 via an Existing ZTP server 25:37 Building a ZTP server from scratch 56:54 Introducing a Basic CLI Template for vEdge30 1:00:00 Attaching a Device to a CLI Template 1:01:03 Applying the Device List to the ZTP server 1:05:04 Verify that vEdge30 has been added to the fabric via ZTP 1:07:47 Summary and Closing

[@rimonyoussef1963]

Thanks Terry for the full explanation , you way of teaching is awesome.

[@TerryVinsonCCIEx2]

Thanks!

[@throwawaythrowaway7893]

high quality stuff i appreciate the knowledge you are sharing , rarely you find someone willing to do hours of free high quality content

[@TerryVinsonCCIEx2]

Glad it was helpful

[@nab3609]

Thanks a lot Terry for your technical and motivation speech. No pain no gain :)

[@gaz1978]

Enjoying this video series, taking the opportunity and labbing the concepts too. I can't say thanks enough Terry!

[@TerryVinsonCCIEx2]

Glad you enjoyed it. I'm building the series as a self paced bootcamp and the pacing is designed to allow you guys to following a long. Fantastic that you are labbing it up. The topology file is in a pinned link on the first video.

[@chevymalibu4295]

Thank you Terry, saw your note about how to create the serial number file coming soon, really great explanation.

[@TerryVinsonCCIEx2]

That one is scheduled for tomorrow.

[@rpratt7990]

Hey Terry, excellent explanation I used your steps to run my lab with 20.9.4 version and it's working good! Thank you!

[@daudkazimi3089]

thanks Terry, great demo

[@TerryVinsonCCIEx2]

glad you like it.

[@kacpermodzelewski7816]

very precise and high quality video, thx Terry I enjoyed, good introduction to cisco vmanage

[@TerryVinsonCCIEx2]

Thank you. I'm trying to create the highest quality free training I can. Im trying to teach the stuff I need students to know when they attend a paid boot camp. Appreciate the feed back and I hope you are enjoying the CCIE EI SDx Bootcamp. Thanks for doing the homework :).

[@ACISData]

thanks, mate, keep comingg back for the videos

[@adrianmxmx]

Thanks for the great content. Look forward to the Device templates!!

[@TerryVinsonCCIEx2]

Coming soon!

[@adrianmxmx]

@@TerryVinsonCCIEx2 Thanks. Your video are very detailed that go over the nuts and bolts that many leave out. 👍

[@chrisnewnham1431]

Superb as always, thanks Terry. Very hard to find ZTP info anywhere else!

[@TerryVinsonCCIEx2]

Glad you enjoyed it

[@0812sonu]

Your awesome Terry 😊

[@TerryVinsonCCIEx2]

thanks for being here!

[@zfzhao2562]

super vidéo,merci beaucoup, i am stuck on vedge 2 days

[@ysteingulliksen9652]

Love your videos :) Could you please also include a video on how to create serial file for import to vManage

[@TerryVinsonCCIEx2]

I sure can. I'll knock that out as soon as the cEdge Video is done.

[@TerryVinsonCCIEx2]

Oh and I'm so glad you are enjoying the videos! :D

[@haribolanil]

Great

[@rafisamuel8066]

Hi Terry, very informative video, thanks for the effort. I have a question, when I try to do the ZTP onboarding of a vEdge device it doesn't come online in vManage unless I assign the system-ip and the site -id manually, could it be a SW bug, I am using the 19.2.4 release?

[@TerryVinsonCCIEx2]

No its more to do with the fact that a vEdge has no crypto-graphic ASIC. But you questions interests me I will labs some scenarios up to look at it critically. Plus there are a few ways to do ZTP.

[@beeg2305]

I though the point of hosting my own on-prem ZTP server was that you just plug in the device and walk away? If I have to install a root certificate on the vEdge first, wouldn't that negate the "zero-touch" part of ZTP? Am I missing something? Great video, btw.

[@TerryVinsonCCIEx2]

Nope you didn’t miss a thing it's a waste of time after acquisition.

[@beeg2305]

@@TerryVinsonCCIEx2 have you gotten it to work zero-touch with physical devices yet?

[@TerryVinsonCCIEx2]

@@beeg2305 yes

[@ervaibhav011]

do we need to configure organization name on vedge while using ZTP? or only the chassis n serial no. will get the job done?

[@TerryVinsonCCIEx2]

In my topology i have only been able to make it work with virtual devices by providing the organizational name. I think that has to do with the UUID/Chassis number and token. I have not had the issue with real ISRs and 8Ks.

[@joyantadebnath8603]

hi terry, thank you so much for explaining the intro. can you please share which router os version you are using. I am doing a lab and onboard all my vedges. but after sometime all my vedges become unreachable from vsmart. at that time point to point ip ping also unreachable from vedge to vsmart, vedge to to internet router. after i rebooted the vedges became reachable again and stable for 10-15 minuses. this thing is killing me. can you please suggest anything or can you please share the router and switch os version and type?

[@chrisnewnham1431]

Is it actually required for the ZTP to be registered on vManage? My orchestrator connections weren't coming up, then I realised they aren't required as you statically enter the chassis numbers and tokens (serial numbers)

[@TerryVinsonCCIEx2]

No. It was just a cheap way of getting a valid cert.

[@lung510]

It very hard to practise SD wan lab without license........