Describes where policies are configured (centralized) and whether they execute on the controller or the local device.
Cisco SD-WAN Controller policy configuration and execution is a centralized policy management system that
-
configures all policies centrally on the Cisco IOS XE Catalyst SD-WAN devices using policy definitions and lists
-
applies policies on the Cisco IOS XE Catalyst SD-WAN devices with apply-policy and lists, and
-
executes policies on different locations depending on the policy type.
Policy execution locations
The actual Cisco SD-WAN Controller policy execution location depends on the type of policy, as shown in this figure:
Policy execution locations are categorized as follows:
-
Control policy and VPN membership policy: The entire policy configuration remains on the Cisco SD-WAN Controller, and the actions taken as a result of routes or VPNs that match a policy are performed on the Cisco SD-WAN Controller.
-
Application-aware routing, cflowd templates, and data policy: The policies are transmitted in OMP updates to the Cisco IOS XE Catalyst SD-WAN devices, and any actions taken as a result of the policies are performed on the devices.