Cisco Catalyst SD-WAN Solution Integrations Guide, Releases 26.x and Later

PDF

Provision a Cisco ThousandEyes enterprise agent in a service VPN using CLI

Updated: April 24, 2026

Want to summarize with AI?

Log in

Configure a Cisco ThousandEyes Enterprise agent in a service VPN using CLI commands to enable network monitoring and testing capabilities.

This task enables you to provision the Cisco ThousandEyes Enterprise agent on Cisco IOS XE Catalyst SD-WAN devices to provide network monitoring and testing capabilities within a service VPN environment.

Use the example command sequences described in this section to provision the Cisco ThousandEyes Enterprise agent on Cisco IOS XE Catalyst SD-WAN devices through a device CLI template or an add-on CLI template.

Follow these steps to provision a Cisco ThousandEyes Enterprise agent in a service VPN using CLI:

Before you begin

  • Ensure that the appropriate DNS and NAT configuration exists to enable the Cisco ThousandEyes Enterprise agent to discover and connect to the Cisco ThousandEyes application.

  • Upload Cisco ThousandEyes Enterprise agent software to SD-WAN Manager.

    Note

    If you have uploaded more than one version of the Cisco ThousandEyes Enterprise agent software to the SD-WAN Manager software repository, while provisioning the agent, SD-WAN Manager installs and activates the latest version of the agent software.

Procedure

SUMMARY STEPS

  1. Enable IOX on the device.
  2. Configure virtual port group. The virtual port group acts as the gateway for the Cisco ThousandEyes Enterprise agent.
  3. Configure app-hosting paramters for the Cisco ThousandEyes Enterprise agent.

DETAILED STEPS

1.

Enable IOX on the device.

Example:

iox
2.

Configure virtual port group. The virtual port group acts as the gateway for the Cisco ThousandEyes Enterprise agent.

Example:

interface VirtualPortGroup4
 vrf forwarding 100
  ip address 192.168.61.1 255.255.255.252
3.

Configure app-hosting paramters for the Cisco ThousandEyes Enterprise agent.

Example:

app-hosting appid te
app-vnic gateway0 virtualportgroup 4 guest-interface 0
 guest-ipaddress 192.168.61.2 netmask 255.255.255.252
app-default-gateway 192.168.61.1 guest-interface 0
app-resource docker
 prepend-pkg-opts
 run-opts 1 "-e TEAGENT_ACCOUNT_TOKEN=z0kemf"
 run-opts 2 "--hostname ISR4461TE"
 run-opts 3 "-e TEAGENT_PROXY_TYPE=STATIC -e TEAGENT_PROXY_LOCATION=proxy-exmaple.com:80"
name-server0  192.168.168.183
start
Note

  • Use the proxy configuration only if the Cisco ThousandEyes agent does not have an Internet access without a proxy. The hostname is optional. If you do not provide the hostname during the installation, the device hostname is used as the Cisco ThousandEyes agent hostname, which appears on the Cisco ThousandEyes portal. From Cisco IOS XE Release 17.7.1a, the DNS name server information is optional.

  • If the Cisco ThousandEyes agent uses a private IP address, establish a connection to the device through NAT.

The Cisco ThousandEyes Enterprise agent is successfully provisioned and running in the service VPN. The agent can now perform network monitoring and testing functions and communicate with the Cisco ThousandEyes application.