Configure the migration of an SD-WAN fabric from on-premises deployment to Cisco Catalyst SD-WAN Cloud, including licensing, account settings, and device templates.
Use this migration when upgrading infrastructure, consolidating management, or aligning licensing with cloud services.
Before you begin
-
Before opening a case, upgrade all your existing control components and edge nodes to one of the latest Cisco-suggested release versions.
-
Verify that your data plane is stable.
-
Attach all edge nodes to a template or agree to manually reconfigure the edge nodes for the migration.
-
Make sure that all edge nodes have working NTP and DNS.
-
If you are using enterprise certificates on the on-premises control components, provide the root certificate authority (CA).
-
Ensure you have out-of-band access to edge nodes via console or an alternate way, in case the edge nodes need manual configuration for recovery.
Procedure
| 1. | Purchase a DNA subscription and control component SKUs for cloud. |
|
| 2. | Open a TAC support case with the CloudOps team and request the on-premises to cloud migration. Provide these details in the case:
When you have provided the necessary details, the CloudOps team provisions the cloud-hosted control component set, installs control component certificates, and shares details.
The CloudOps team applies the configuration database backup and the running configuration you provided from the on-premises
Cisco SD-WAN Manager to the new cloud-hosted
Cisco SD-WAN Manager instance.
|
|
| 3. | You may need to update your enterprise firewalls with the new IPs of the cloud-hosted control components. |
|
| 4. | Set up and execute a pilot change window to migrate one or more test edge nodes to the cloud-hosted control components. Then roll back to the on-premises Cisco SD-WAN Manager. |
|
| 5. | Configure the new Cisco SD-WAN Validator FQDN on the edge node to begin the migration. |
|
| 6. | Prepare for the final change window as necessary. |
|
| 7. | Set up and execute a final change window to migrate all edge nodes from on-premises to cloud-hosted control component set. |
|
| 8. | If templates were created and applied for the on-premises Cisco SD-WAN Manager, Cisco SD-WAN Validators, and Cisco SD-WAN Controllers, review and correct them before applying them to the cloud-hosted control components after migration, with special attention to the interface configuration. |
|
| 9. | The edge templates created and applied for the on-premises Cisco SD-WAN Manager contain the pre-migration orchestrator FQDN when the database is restored to the new Cisco SD-WAN Manager. Update the target Cisco SD-WAN Manager to reflect the post-migration orchestrator FQDN. |
What to do next
Work with your Account Team or Support to procure Cisco Catalyst SD-WAN cloud subscriptions and add them to the existing Smart Account (SA) and Virtual Account (VA) where the on-premises fabric control component profile is created.
The Cisco SD-WAN Manager is provisioned only in the primary region. The Cisco SD-WAN Validator and Cisco SD-WAN Controller instances are provisioned in both the primary and the secondary regions.
The CloudOps team creates a new control component profile in the same SA/VA as the existing on-premises fabric. This allows the cloud-hosted control component set to have the same organization name as the existing on-premises fabric, which makes it possible to transfer the configuration database from on-premises Cisco SD-WAN Manager to the cloud-hosted Cisco SD-WAN Manager.
You cannot use the configuration database restore method if the source and destination Cisco SD-WAN Manager instances have different organization names configured. You cannot change the organization name on a cloud-hosted Cisco SD-WAN Manager instance once it is provisioned.
Since the new Cisco SD-WAN Manager is configured using the configuration database restore method, the statistics database from the on-premises Cisco SD-WAN Manager will not be migrated.
If Cisco SD-WAN Analytics is in use on the on-premises fabric, it will continue to work after the migration.
Some data loss may occur when the migration happens because the new cloud Cisco SD-WAN Manager starts a fresh data collection and sends it to the Cisco SD-WAN Analytics servers.
As the Cisco SD-WAN Validator FQDN changes, the configuration on the edge nodes must be updated for the migration.
You can do this using command-line interface (CLI) templates from Cisco SD-WAN Manager applied to all the edge nodes. If no CLI templates exist on the on-premises Cisco SD-WAN Manager, you must create and apply them before starting the migration. If you do not prefer CLI templates, then you must manually reconfigure all the edge nodes individually via console or Secure Shell (ssh).
If an issue occurs during the edge node migration, you may need to use out-of-band management access to manually update the edge nodes so they can switch over to new Cisco SD-WAN Validators.
At the time of migration, the control and data plane flaps for each edge node as it is pointed to the new Cisco SD-WAN Validator DNS and reconnects to the new cloud-hosted control components.
Configure all edge nodes with functioning NTP and DNS before the migration.
Rolling back requires changing the Cisco SD-WAN Validator configuration on the edge nodes back to the on-premises Cisco SD-WAN Validator.
After a successful migration, you can delete the control component profile that you hosted from the PNP SA/VA.