Cisco Catalyst SD-WAN CLI lab 4 of 14

Service-side routing and VRRP

Connect the overlay to site LANs: VRRP on a dual-edge site, OSPF to a core router, eBGP to a third-party router, and the redistribution that joins them to OMP.

Run this lab

It needs Standard: its 8 nodes are set to 8 vCPU and 6,656 MB in total.

In your workspace: Shared, then Cisco Catalyst SD-WAN CLI guided labs, then 04 - Service-side routing and VRRP

Run it on Standard from £5 a day

The free demo can’t run it: it has 6 vCPU and 8 GB, and this lab’s nodes need 8 vCPU and 6,656 MB together. Every lab plan includes every guided lab.

Level
Advanced
Time
About 90 minutes
Nodes need
8 vCPU, 6,656 MB
Smallest plan
Standard

The scenario

Overlays are only useful when they join real LANs. Manchester (site 11) has grown: two WAN edges share one LAN, with a core router R1 running OSPF behind them, and PCs that need a default gateway that survives losing an edge. Leeds (site 12) has a third-party router, R2, that only speaks BGP. You configure VRRP, OSPF and BGP inside VPN 10, and the redistribution that joins all of it to OMP, so a PC in Manchester reaches a network behind R2.

NodeSystem IPSiteINET (ge0/0)VPN 10 (ge0/1)
BR110.255.0.1111198.51.100.1110.11.10.2/24, VRRP .1
BR310.255.0.1311198.51.100.1310.11.10.3/24, VRRP .1
BR210.255.0.1212198.51.100.1210.12.10.1/24
R1Gi0/0 10.11.10.4/24, Lo0 10.11.50.1/24, OSPF area 0
R2Gi0/0 10.12.10.2/24, Lo0 10.12.50.1/24, BGP AS 65012
H110.11.10.10/24, gateway 10.11.10.1

The WAN edges in VPN 10 at Leeds use BGP AS 65000.

What this course leaves out. There is no SD-WAN Manager (vManage) in any of these labs. A virtual edge can't join the Manager's inventory without a signed device list from Cisco, which these labs don't have. So you won't see the Manager's GUI, dashboards, templates, Policy Builder or zero-touch onboarding. You work at the CLI of the controllers and edges, with a private lab CA and device lists typed by hand. The exam sets these protocols up as Manager feature templates. Those templates aren't here, so this lab practises the routing and the configuration, not the template workflow.

What you’ll practise

  • Run VRRP between two WAN edges with OMP tracking
  • Peer with LAN routers using OSPF and BGP in VPN 10
  • Redistribute between OMP and the LAN protocols

The tasks

  1. Start the lab
  2. VRRP on the dual-edge site
  3. OSPF to the core
  4. BGP to the third-party router
  5. Follow a route end to end

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of Service-side routing and VRRP8 nodes and 2 networks, 10 links. Every link is listed as text below the diagram.vBondvSmartBR1BR3BR2R1R2H1INETLAN11eth0G0/1Gi0/0Gi0/0eth0G0/1G0/1ge0/0G0/0G0/0G0/0
8 nodes and 2 networks, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Nodes in Service-side routing and VRRP, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
vBondCisco vBondvtbond-20.12.21 vCPU, 1,024 MB
vSmartCisco vSmartvtsmart-20.12.21 vCPU, 1,024 MB
BR1Cisco vEdgevtedge-20.12.21 vCPU, 1,024 MB
BR3Cisco vEdgevtedge-20.12.21 vCPU, 1,024 MB
BR2Cisco vEdgevtedge-20.12.21 vCPU, 1,024 MB
R1Cisco IOSvvios-adventerprisek9-m.SPA.159-3.M61 vCPU, 512 MB
R2Cisco IOSvvios-adventerprisek9-m.SPA.159-3.M61 vCPU, 512 MB
H1Alpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder Cisco Catalyst SD-WAN CLI guided labs.

  3. Open 04 - Service-side routing and VRRP and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More Cisco Catalyst SD-WAN CLI labs

All Cisco Catalyst SD-WAN CLI labs

Related labs in other courses

CloudLabBox is independent of Cisco. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.