[How To] Cisco SD-WAN - Onboarding a Catalyst 8000v (or CSR 1000v)

In this video, we'll walk through how to setup & onboard a Catalyst 8000v virtual router to a Cisco SD-WAN network. These steps also apply to a CSR 1000v router. Note that the configuration in this video is 100% manual, and does not use any day 0 auto-provisioning capabilities.

Links / Follow me elsewhere:

If this video was helpful to you, please consider subscribing & sharing! Thank you!

Thanks for watching!
- Matt

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Chapters:
0:00 - Intro
0:55 - Lab Overview
1:46 - Switching from Autonomous Mode to Controller-managed
4:15 - SD-WAN System Config Settings
5:35 - Interface & Tunnel Config
6:45 - Loading a Self-Signed Enterprise CA Certificate
8:53 - Generate OTP Token in vManage
9:37 - Activating the Catalyst 8000v (& Validation)
12:09 - Extra: Command Differences - 'show ip route' vs 'show sdwan ip route'

Standard Disclaimer: Any comments / opinions here are my own, and do not represent my current or former employers.

[rpratt]

Excellent video and great explanation! Thank you!

[andrewkemmy]

I found this very helpful, thanks. In my case I depend on getting ssh access via GigabitEthernet1 so in my lab I added "allow-service all" within the configuration for the sdwan tunnel, otherwise ssh access is removed when the sdwan configuration is applied.

[LonewolfID]

why my cat8k doesn't have "controller-mode enable" command?
i do have the same version IOS-XE on your video tho, hmmm

[prbbelt]

Any help you can provide on uploading the C8000v to vmanage? I'm attempting to upload the WAN edge list as a csv file but it keeps failing saying virtual hardware platforms are not supported.

[seangodbehere]

I’m hitting an issue where after entering “controller-mode enable” and the device restarts, it boots back into autonomous mode. Have you seen that issue before?

[ie]

good video, well done...is it normal behaviour that both Gig1 and tunnel int sharing same IP? would it be conflict? I tried this in my lab and I lost the box "although it's joined vmanage"

[mohanmuthu]

Good Video. But one question. After you issue the "activate" command on the CLI, how does this router learn the IP of the vManage? At this moment, the router only knows the IP of vBond. But router cannot authenticate to vBond because it does not have the certificate yet. So, my question is, how C8000v gets in touch with vManage for installing its certificate etc.?

My search on Cisco documentation for this did not yield any results. I am sure you can help.
Thanks a lot!

[joand]

I can't add the 8000v image to eve-ng. It doesn't work

[noobsniperxx]

how did you get the unused device template?