Cisco Catalyst SD-WAN Onboarding Guide, Releases 26.x and Later

PDF

Cisco Catalyst SD-WAN Onboarding Guide, Releases 26.x and Later

Deploy a Cisco SD-WAN instance

Updated: October 12, 2026

Want to summarize with AI?

Log in

Configure a Cisco SD-WAN Manager instance to provide centralized network management for your SD-WAN overlay network. This enables you to monitor, configure, and maintain vEdge routers and links efficiently.

Follow these steps to deploy a SD-WAN instance or cluster:

It is recommended to deploy a Cisco SD-WAN Manager cluster (minimum three instances) for larger networks to ensure high availability and scalability.

Procedure

  1. Create a Cisco SD-WAN Manager VM instance on an ESXi or KVM hypervisor.

  2. Create either a minimal or a full configuration for each Cisco SD-WAN Manager instance.

    You can configure Cisco SD-WAN Manager by using the ESXi console, or use SSH to open a CLI session and manually configure Cisco SD-WAN Manager.

  3. Configure certificate settings and generate a certificate for Cisco SD-WAN Manager.

  4. Create a Cisco SD-WAN Manager cluster.

Cisco SD-WAN Manager Web Server Ciphers:

In Releases 16.3.0 and later, Cisco SD-WAN Manager web servers support the following ciphers:

  • TLS_DHE_DSS_WITH_AES_128_GCM_SHA256

  • TLS_DHE_DSS_WITH_AES_256_GCM_SHA384

  • TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

  • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

  • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

  • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

  • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

In Release 16.2, Cisco SD-WAN Manager web servers support the following ciphers:

  • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

  • TLS_RSA_WITH_AES_128_CBC_SHA