Cisco Catalyst SD-WAN Multitenancy Guide, Releases 26.x and Later

PDF

Prerequisites for automatic tenant placement on multitenant SD-WAN Controllers

Want to summarize with AI?

Log in

Lists the prerequisites for automatic tenant placement on multitenant SD-WAN Controllers, including controller readiness, and account configuration requirements.


Before adding new tenants, ensure that SD-WAN Controller, capacity limits, and account configurations meet the foundational requirements.

SD-WAN Controller requirements

  • Ensure at least two Cisco SD-WAN Controllers are operational and visible in SD-WAN Manager before adding new tenants.

  • Push a template from SD-WAN Managerto a controller to place it in Manager mode; a controller in CLI mode cannot serve multiple tenants.

  • Verify that each SD-WAN Controller pair can support a maximum of 24 tenants and 1000 tenant devices. Ensure at least two controllers have capacity for a new tenant. If no pair can support a new tenant, add two controllers and switch them to Manager mode.

Tenant provisioning rules

  • Add up to 16 tenants in a single operation. SD-WAN Manager provisions tenants sequentially, not in parallel.

  • Do not start a second Add Tenant task while one is already in progress; otherwise, the second task fails.

Accounts and profiles

Each tenant requires a unique Virtual Account (VA) on Plug and Play Connect in Cisco Software Central. The tenant VA must belong to the same Smart Account (SA) as the provider VA. Depending on the deployment type, one of the following must be completed:

  • On-premises deployments: Create a SD-WAN Validator controller profile for the tenant on Plug and Play Connect with these mandatory fields:

    Table 1. Mandatory fields for on-premises validator controller profile
    Field Description
    Profile name Enter a name for the controller profile.
    Multi-tenancy From the drop-down list, select Yes.
    SP organization name Enter the provider organization name.
    Organization name Enter the tenant organization name in the format <SP Org Name>-<Tenant Org Name>. The organization name can be up to 64 characters.
    Primary controller Enter the host details for the primary SD-WAN Validator
  • For cloud deployments: SD-WAN Manager automatically creates the Validator Controller profile during tenant creation.