Configure a Cisco SD-WAN Manager instance to provide centralized network management for your SD-WAN overlay network. This enables you to monitor, configure, and maintain vEdge routers and links efficiently.
Follow these steps to deploy a SD-WAN instance or cluster:
It is recommended to deploy a Cisco SD-WAN Manager cluster (minimum three instances) for larger networks to ensure high availability and scalability.
Procedure
| 1. | Create a Cisco SD-WAN Manager VM instance on an ESXi or KVM hypervisor. |
|
| 2. | Create either a minimal or a full configuration for each Cisco SD-WAN Manager instance. You can configure Cisco SD-WAN Manager by using the ESXi console, or use SSH to open a CLI session and manually configure Cisco SD-WAN Manager. |
|
| 3. | Configure certificate settings and generate a certificate for Cisco SD-WAN Manager. |
|
| 4. | Create a Cisco SD-WAN Manager cluster. |
Cisco SD-WAN Manager Web Server Ciphers:
In Releases 16.3.0 and later, Cisco SD-WAN Manager web servers support the following ciphers:
-
TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
-
TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
-
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
-
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
-
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
-
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
-
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
-
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
In Release 16.2, Cisco SD-WAN Manager web servers support the following ciphers:
-
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
-
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
-
TLS_RSA_WITH_AES_128_CBC_SHA