Cloud-hosted SD-WAN control component interfaces

Updated: July 30, 2026

Want to summarize with AI?

Lists the network interface allocations, IP address assignments, and recommended configurations for cloud-hosted SD-WAN control components.

Network interface allocation for SD-WAN control components

For SD-WAN Manager instances, we allocate three network interfaces: eth0, eth1, and eth2.

For SD-WAN Validator and SD-WAN Controller instances, we allocate two network interfaces: eth0 and eth1.

Public and private IP addresses assigned to the network interfaces remain static. If you replace or move an SD-WAN control component instance to a new region, these addresses may change.

You can view the static IP address using the Catalyst SD-WAN Portal, from Overlay Details > Controller view > Private IP.

Recommended interface configurations

Table 1. Interface configuration
Control Component	Network interface 1 (eth0)	Network interface 2 (eth1)	Network interface 3 (eth2)
Control Component	Management access	Control access by nodes in fabric	Communication among SD-WAN Manager instances in a cluster; SD-AVC component functionality
SD-WAN Manager	Private IP Static pre-assigned address (Refer to Note 1.) Public IP Static pre-assigned address One-to-one NAT mapping to private IP address Configuration requirements VPN 512 Non-tunnel interface Configure the interface to act as a DHCP client. (Refer to Note 2.)	Private IP Static pre-assigned address Public IP Static pre-assigned address One-to-one NAT mapping to private IP address Configuration requirements VPN 0 Tunnel interface Configure the interface to act as a DHCP client. (Refer to Note 2.)	Private IP Static pre-assigned address Public IP None assigned Configuration requirements VPN 0 Non-tunnel interface Configure with a static IP. Use the assigned private IP address. View the static IP address using the Catalyst SD-WAN Portal, from Overlay Details > Controller view > Private IP.
SD-WAN Validator	Use the same configuration as for SD-WAN Manager.	Use the same configuration as for SD-WAN Manager.	Not applicable.
SD-WAN Controller	Use the same configuration as for SD-WAN Manager.	Use the same configuration as for SD-WAN Manager.	Not applicable.

Note

1: A cloud gateway deployed using the Catalyst SD-WAN Portal can access this address. For details, refer to the Custom IP prefixes for cloud-hosted SD-WAN control components section in this guide.

2: The interface always receives the same private IP on every DHCP renewal, even when DHCP is used for IP assignment.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.