Describes how to configure and operate multitenant WAN edge devices in Cisco Catalyst SD-WAN, including provider-level onboarding, enabling multitenancy, creating resource profiles, onboarding tenants, and mapping tenant VPNs to device VPNs for traffic isolation. It also covers resource and device limits, tenant removal, and related provider-admin template workflows in Cisco SD-WAN Manager.
Feature history for multitenant WAN edge devices
Describes the developments of this feature, release by release.
Multitenant WAN edge devices
Describes WAN edge devices operating in a multitenancy environment, including benefits, device resource tiers, supported devices, and restrictions.
Enable multitenant WAN edge device deployment
Describes the procedure for enabling a WAN edge device in a multitenant environment.
Onboard WAN edge devices at the provider level using a template
Describes how to onboard WAN edge devices at the provider level by uploading and validating the serial number file, bootstrapping the device, handling enterprise certificate installation if required, and attaching the device to a configuration template.
Enable multitenancy on provider-level WAN edge devices using a template
Describes how a provider admin enables multitenancy on a provider-level WAN edge device by editing its System feature template.
Create a resource profile (tier)
Describes how a provider admin creates a resource profile, formerly called a tier, to set tenant resource limits for multitenant WAN edge devices. It covers maximum VPNs, optional NAT and route limits, warning thresholds, allowed transport TLOCs, color and encapsulation settings, and device-specific VPN limits.
Onboard tenants to a multitenant WAN edge device using a template
Describes how a provider admin onboards tenants to a multitenant WAN edge device. It notes that the tenant must already exist in the multitenant deployment and that onboarding causes the device to establish control connections to the tenant’s assigned SD-WAN Controllers.
Create a tenant VPN for onboarded tenants using a template
Describes how a provider admin creates tenant service VPNs on a multitenant WAN edge device using a Cisco VPN template, including mapping each tenant VPN ID to a device VPN ID to keep tenant traffic isolated.
Remove a tenant from a multitenant WAN edge device using a template
Describes how a provider admin removes a tenant from a multitenant WAN edge device by detaching the tenant’s service VPN template from the device template, then deleting the tenant entry from the Tenant feature template.
Delete a resource profile (tier)
Describes how a provider admin deletes a resource profile, also referred to as a tier, in SD-WAN Manager, by selecting the existing tier and confirming deletion.