Provides a comparison of tasks and the parties responsible for cloud management, including Cisco SD-WAN Cloud, Cloud-Pro, and Cloud-MSP services. Any functions not listed here are not monitored by Cisco. In this table, "CloudOps" refers to the Cisco SD-WAN CloudOps team.
This table summarizes which parties are responsible for key tasks in Cisco SD-WAN Cloud management across different service models.
| Task |
Cisco SD-WAN Cloud |
Cisco SD-WAN Cloud-Pro |
Cisco SD-WAN Cloud-MSP |
Comments |
|---|---|---|---|---|
| Provision fabrics |
||||
| Provision fabrics from Cisco Catalyst SD-WAN Portal |
Customer |
Customer |
CloudOps |
– |
| Monitor and troubleshoot cloud control components infrastructure |
||||
| Monitor CPU and data disk utilization |
CloudOps |
– |
||
| Troubleshoot loss of connectivity to network interfaces |
CloudOps |
– |
||
| Troubleshoot failure to reach instances |
CloudOps |
– |
||
| Monitor Cisco Catalyst SD-WAN services |
||||
| Provide expiration notification of control component SSL certificates |
CloudOps |
– |
||
| Monitor availability of the Cisco SD-WAN Manager web server |
CloudOps |
– |
||
| Troubleshoot loss of control connection to the control components |
CloudOps |
– |
||
| Manage capacity of Cisco Catalyst SD-WAN control components |
CloudOps |
CloudOps monitors and upgrades the instance capacity according to the number of devices on the fabric. Cluster expansion may occur. |
||
| Disaster Recovery |
||||
| Capture periodic volume snapshots |
CloudOps |
In multitenancy, volume snapshots apply to the entire multitenant Cisco SD-WAN Manager cluster, not to individual tenants. |
||
| Capture periodic configuration backups |
CloudOps |
In multitenancy, configuration backups apply to the entire multitenant Cisco SD-WAN Manager cluster, not to individual tenants. |
||
| Capture on-demand snapshots |
– |
Customer |
Customer |
– |
| Restore fabric based on volume or configuration |
CloudOps |
– |
||
| Upgrade software |
||||
| Upgrade control component software |
CloudOps |
CloudOps * |
CloudOps * |
* We perform upgrades only to recommended releases. |
| Upgrade edge device or node software |
Customer |
– |
||
| Upload and manage edge images in Cisco SD-WAN Manager Software Repository |
CloudOps |
Customer |
Customer |
– |
| Other tasks |
||||
| Onboard Cisco SD-WAN Analytics |
Not applicable * |
Customer |
Customer |
* Cisco SD-WAN Analytics is onboarded by default for all Cisco Catalyst SD-WAN deployments. |
| Assist with on-premises to cloud migration |
CloudOps |
For more details on the on-premises to cloud migration, refer to On-Premises to Cloud Migration Process Details on the Cisco website. |
||
| Configure custom subnets and TACACS |
– |
Customer |
Customer |
Set up custom subnets and TACACS during Day-0 provisioning. For Day-N, you can open a TAC case with CloudOps. TACACS is available for Cisco SD-WAN Cloud-MSP fabrics via MT-Edge. Refer to the Cisco Catalyst SD-WAN Systems and Interfaces Configuration Guide for more information. |
| Renew control component certificates |
CloudOps |
Customer * |
Customer * |
* CloudOps can help renew certificates when requested. |
| Create Smart Accounts (SA) or Virtual Accounts (VA) on software.cisco.com and attach Cisco Catalyst SD-WAN subscribed devices to the SA and VA |
Customer |
– |
||
| Allow external management of SA and VA on PNP Connect |
Customer |
– |
– |
Do not allow external management of SA and VA on PNP Connect before provisioning a fabric in Cisco Catalyst SD-WAN Portal. The provisioning workflow automatically enables the external management. |
| Accept external management of SA and VA and map tenant VA to your SA and VA |
CloudOps |
– |
– |
– |
| Define device configuration templates and policies through Cisco SD-WAN Manager |
Customer |
– |
||
| Manage certificates for web servers |
CloudOps |
Customer * |
Customer ** |
* CloudOps can help renew certificates when requested. ** CloudOps can renew web certificates if the Cisco SD-WAN Cloud-MSP fabric is deployed in the cisco.com domain. |
| Sync edge serials with credentials |
Not applicable * |
Customer |
Customer |
* Cisco SD-WAN Cloud customers can use their Cisco Connection Online (CCO) login credentials for SSO and syncing edge serials. |
| Manage the allowed IP access list |
– |
Customer |
Customer |
|
| Configure a custom identity provider (IdP) |
– |
Customer |
Customer |
Cisco SD-WAN Cloud fabrics only support CCO as an identity provider. You can use SSO to navigate among Catalyst SD-WAN applications such as Cisco SD-WAN Manager, Cisco SD-WAN Analytics, and Cisco Catalyst SD-WAN Portal. |