CCNP Enterprise SD-WAN: 300-415 ENSDWI v1.2 — Implementing Cisco Catalyst SD-WAN

CCNP 300-415 ENSDWI course: implementing Cisco Catalyst SD-WAN, vManage/vSmart/vBond controllers, ZTP, OMP, TLOC, AAR, QoS, and Cloud OnRamp
Curriculum: 80 lessons · 8 sections · 10 free
CCNP Enterprise Concentration · SD-WAN implementation engineer level
AZ · RU · EN · Beginner-Friendly Path to SD-WAN Implementation Engineer (CLI / SD-WAN Manager / REST API)
Individual
Per month 200 AZN
Group
Per month 150 AZN
Paying for the full course in a group
15% discount
Installments
50/50
Subscription
from 60 AZN a month
How do you replace expensive MPLS circuits and box-by-box CLI complexity with a unified, programmable Cisco Catalyst SD-WAN fabric? How do you deploy SD-WAN Manager (vManage), SD-WAN Controller (vSmart), and SD-WAN Validator (vBond) from scratch and onboard branch routers in minutes via Zero-Touch Provisioning (ZTP)? How do OMP routing, TLOC colors, IKE-less IPsec data plane encryption, Application-Aware Routing (AAR) based on real-time BFD loss/latency/jitter, end-to-end QoS with FEC and Packet Duplication, ZBFW security, Cisco Umbrella SIG, and REST API automation work? Master Cisco Catalyst SD-WAN implementation and troubleshooting step by step.

Enrollment for a new group is open — send a request to reserve your seat

Lessons are taught live in Azerbaijani and Russian.

Or study on your own in your personal account → with a subscription from 60 AZN a month

What you need to start

The curriculum is structured with progressive disclosure: CCNA-level networking fundamentals (OSI/TCP-IP, IPv4/IPv6 subnetting, VLANs, basic OSPF/BGP routing, and general VPN concepts) are sufficient to begin. Every Cisco Catalyst SD-WAN mechanism—from the 4 planes and PKI certificates to OMP, vManage templates, and AAR/QoS policies—is explained from the ground up with real-world scenarios, Cisco IOS XE (Controller Mode) CLI outputs, and hands-on labs.

CCNA-level networking basicsSD-WAN architecture from scratchSD-WAN Manager GUI + cEdge CLIHands-on lab practicum per section

How you will learn

Every lesson begins with a practical operational challenge (onboarding a branch behind NAT, dual MPLS/Internet failover, protecting voice against brownouts, or steering Microsoft 365 traffic directly to the cloud) and walks you through configuring SD-WAN Manager GUI templates and verifying state via cEdge CLI (`show sdwan ...`). All mechanisms are illustrated with SVG diagrams, step-by-step packet animations (DTLS, ZTP, OMP, BFD, AAR, Cloud OnRamp), engineering calculations, and interactive trainers.

The golden rule (R1)

Every Cisco Catalyst SD-WAN concept—from control/data plane separation, TLOC colors, and IPsec key exchange to Centralized Control/Data/AAR policies, hierarchical QoS, and vManage REST API automation—is explained from scratch in clear, rigorous engineering language. Each of the 8 sections concludes with a comprehensive hands-on lab practicum.

Full 8-section curriculum (80 lessons)

01

Cisco Catalyst SD-WAN Architecture and Controllers

lessons 1–10
  • legacy WAN challenges (MPLS cost, DMVPN scaling complexity, cloud backhauling trombone effect) and SD-WAN benefits
  • 4-plane architecture (Management, Control, Orchestration, Data)
  • deep dive into SD-WAN Manager (vManage)
  • SD-WAN Controller (vSmart)
  • SD-WAN Validator (vBond)
  • and WAN Edge platforms (Catalyst 8000 / ISR / vEdge)
  • Cloud (Cisco Cloud / AWS / Azure) vs. On-Premises controller deployment and HA
  • DTLS/TLS control tunnels
  • PKI certificate chain, and hardware SUDI / TPM trust anchor
02

Controller Deployment and WAN Edge Onboarding

lessons 11–20
  • Underlay transport design (MPLS, Business Internet, 5G/LTE)
  • NAT traversal with STUN and NAT types
  • foundational System IP
  • Site ID, Organization Name
  • and VPN 0 / VPN 512 configuration
  • deploying and clustering vManage/vSmart/vBond
  • Zero-Touch Provisioning (ZTP) and Cisco Plug-and-Play (PnP) workflow
  • manual Bootstrap onboarding
  • and troubleshooting DTLS control connections
03

Configuration Templates, SD-WAN Manager Operations, and Migration

lessons 21–28
  • CLI Mode vs. vManage Mode
  • Feature Templates and Device Templates architecture
  • global vs. device-specific CSV variables
  • modern Configuration Groups and Feature Profiles (UX 2.0)
  • automatic Configuration Rollback on control loss
  • RBAC and audit logging
  • zero-downtime Software Upgrade and image activation
  • and brownfield MPLS/DMVPN to SD-WAN migration strategies
04

OMP Overlay Routing, TLOCs, and Service-Side Routing

lessons 29–40
  • Overlay Management Protocol (OMP) architecture
  • three route types (vRoutes, TLOCs, Service Routes)
  • TLOC anatomy and transport colors (Public vs. Private colors, Restrict flag)
  • IKE-less IPsec data plane tunnels and OMP key rotation
  • BFD protocol (timers, Multiplier, Loss/Latency/Jitter measurement)
  • OMP best-path selection and ECMP
  • L2 and L3 GRE TLOC Extension
  • Service VPN segmentation
  • OSPF, EIGRP, eBGP/iBGP (AS-Override, SoO)
  • FHRP (VRRP), and mutual OMP redistribution
05

Centralized and Localized Control and Data Policies

lessons 41–52
  • policy architecture (Local vs. Centralized, Control vs. Data)
  • policy lists (Sites, Prefixes, VPNs, TLOCs, Color, SLA Class)
  • Control Policy route filtering
  • building Hub-and-Spoke
  • Regional Mesh, and extranet topologies
  • Service Insertion / Service Chaining through data center firewalls
  • traffic engineering with TLOC Preference and Weight
  • localized Route Policies and OS-level ACLs
  • centralized Data Policies
  • Direct Internet Access (DIA) with NAT Tracker
  • and Multi-Region Fabric (MRF)
06

Application-Aware Routing (AAR) and End-to-End SD-WAN QoS

lessons 53–62
  • Application-Aware Routing (AAR) principles
  • DPI and NBAR2 / SD-AVC application visibility
  • BFD measurement windows (Poll Interval and Multiplier) and SLA Class design
  • configuring AAR policies (Preferred Color, Backup SLA Preferred Color, Strict vs. Loose, Fallback to Best Path)
  • DSCP/CoS classification and marking
  • outer IPsec header DSCP copy and MPLS carrier alignment
  • egress queuing (LLQ Queue 0, WRR Queues 1–7, WRED)
  • hierarchical shaping and Per-Tunnel QoS
  • Forward Error Correction (FEC)
  • and Packet Duplication
07

SD-WAN Security and Cloud OnRamp Integration

lessons 63–72
  • embedded Catalyst SD-WAN security architecture (Zero Trust / SASE)
  • Zone-Based Firewall (ZBFW) and router self-zone protection
  • Snort IPS/IDS intrusion prevention
  • URL Filtering and AMP + Threat Grid malware defense
  • DNS security and Cisco Umbrella SIG cloud integration
  • Cloud OnRamp for SaaS (vQoE probing for Microsoft 365, Webex, Salesforce)
  • Cloud OnRamp for Multicloud automation (AWS Transit Gateway, Azure Virtual WAN, GCP)
  • and Overlay IP Multicast
08

Monitoring, REST API Automation, Troubleshooting, and Capstone Project

lessons 73–80
  • network monitoring in SD-WAN Manager (alarms, events, IPFIX/cFlowd export, Syslog, and SNMPv3)
  • Cisco Catalyst SD-WAN Analytics and ThousandEyes integration
  • SD-WAN Manager REST API architecture (`j_security_check` authentication, `X-XSRF-TOKEN`, Swagger docs)
  • Python (`requests`, `catalystwan`) and Ansible / Terraform automation
  • end-to-end Control/Data Plane troubleshooting methodology
  • 300-415 ENSDWI exam strategy
  • and the Enterprise SD-WAN Capstone Project

What you can do after the course

Independently deploy, configure, and troubleshoot enterprise Cisco Catalyst SD-WAN fabrics of any scale: stand up vManage, vSmart, and vBond controllers, onboard Catalyst 8000 / ISR routers via ZTP/PnP, build Feature/Device Templates and Configuration Groups, engineer OMP overlay routing, TLOC colors, and TLOC Extension HA, integrate branch OSPF/BGP/EIGRP with loop prevention, construct Hub-and-Spoke, Regional Mesh, and Multi-Region Fabric topologies using Control Policies, implement Direct Internet Access (DIA), Application-Aware Routing (AAR) based on BFD SLAs, end-to-end QoS with FEC and Packet Duplication, embedded ZBFW/IPS/Umbrella SIG security, Cloud OnRamp for SaaS/Multicloud, and Python / REST API automation.

Alignment with Cisco CCNP Enterprise (300-415 ENSDWI) Certification

This course covers 100% of the official blueprint objectives for the 300-415 ENSDWI (Implementing Cisco SD-WAN Solutions v1.1 / v1.2) concentration exam. Passing 300-415 ENSDWI earns the Cisco Certified Specialist – Enterprise SD-WAN Implementation certification and, combined with the 350-401 ENCOR core exam, fulfills all requirements for the full CCNP Enterprise certification.

How do we teach?

Learning stages

01

Webinar

Students join the lesson live. At the end of each lesson, students are sent a video recording of the class.

02

Homework

Every assignment is based on the topic covered in the webinar. Homework helps you reinforce the material and understand it better.

03

Working with a mentor

The teacher stays in touch with the group both during the course and outside class. Any questions get answered right away.

04

Portfolio

During the course you'll complete several projects on different topics — they'll show employers what you can do.

Self-paced learning

The full curriculum in your personal account

80 topics with theory, examples and practice. The first 10 are free, the rest come with a subscription. Interactive lessons with slides and coding trainers: 79.

Section 1. Cisco Catalyst SD-WAN Architecture and Hardware Platforms10 topics
  1. WAN Evolution: Limitations of Legacy WAN (MPLS / DMVPN) and Transition to Cisco Catalyst SD-WAN
  2. The Four Planes of Cisco Catalyst SD-WAN Architecture: Orchestration, Management, Control, and Data Plane
  3. Orchestration Plane (vBond / SD-WAN Validator): Initial Device Validation and NAT Traversal
  4. Control Plane (vSmart / SD-WAN Controller): Scaling OMP Routing and IKE-Less IPsec Key Exchange
  5. Data Plane Internals: IPsec and GRE Tunnels, Anti-Replay Protection, and BFD Probes
  6. SD-WAN Segmentation and Identity Model: VPN 0, VPN 512, Service VPNs, System-IP, and Site-ID
  7. WAN Edge Hardware and Virtual Platforms: Catalyst 8200 / 8300 / 8500, ISR, ASR, and Catalyst 8000V
  8. Multi-Region Fabric (MRF) Architecture: Hierarchical Access and Core Regions
  9. Cisco SD-WAN Cloud OnRamp Architecture Overview: SaaS, IaaS, Colocation, Multicloud, and Interconnect
  10. Practicum #1: Deploying a Cisco Catalyst SD-WAN Lab, Navigating SD-WAN Manager, and CLI Verification
Section 2. Controller Deployment, PKI Certificates, and Control Connections Troubleshooting10 topics
  1. SD-WAN Controller Hosting Models: Cisco Cloud, Partner-Hosted, and On-Premises Deployment
  2. Installing and Bootstrapping vManage, vBond, and vSmart Controllers (System, VPN 0, VPN 512)
  3. Zero-Trust PKI Security Architecture: X.509 Certificates, Root CA, and Hardware TPM / SUDI Chips
  4. Registering Controllers in SD-WAN Manager, Smart Account Sync, and WAN Edge Authorized Lists
  5. Controller Scalability and High Availability: SD-WAN Manager (vManage) Clustering and vSmart / vBond Pools
  6. Control Connection Internals: DTLS vs. TLS, Permanent vs. Transient Tunnels, and Port Hopping
  7. Firewall Rules and NAT Design for SD-WAN Controllers and WAN Edge Routers
  8. Control Connection Troubleshooting Methodology (Part 1): VPN 0 Transport, DNS, NTP, Certificates, and Licensing
  9. Control Connection Troubleshooting (Part 2): Analyzing show sdwan control Outputs and Error Codes
  10. Practicum #2: Bootstrapping Controllers, Installing PKI Certificates, and Solving 6 Control-Plane Tickets
Section 3. WAN Edge Router Deployment, OMP Routing, and TLOC Extension12 topics
  1. Automated WAN Edge Onboarding: Zero-Touch Provisioning (ZTP) and Cisco Plug-and-Play (PnP) Workflow
  2. Bootstrap and Manual WAN Edge Onboarding: Static VPN 0 IPs, USB Cloud-Init, and Cat8000V Tokens
  3. Deploying WAN Edge Routers in Data Centers and Regional Hubs
  4. Configuring Underlay Circuit Termination: MPLS, Internet, Cellular LTE/5G, and Tunnel-Interface Options
  5. Overlay Management Protocol (OMP) Deep Dive: vRoutes, TLOC Routes, and Service Routes
  6. TLOC Anatomy: Public vs. Private Colors, the Restrict Flag, and Carrier Groups
  7. OMP Best-Path Selection Algorithm, ECMP Load Sharing, and OMP Graceful Restart
  8. TLOC Extension: Configuring Dual-Router Branch High Availability Across Dual Transports
  9. On-Demand Dynamic Tunnels and BFD Timer Tuning for Scale and Failover
  10. Verifying OMP, TLOCs, BFD, and IPsec in CLI and GUI: Decoding C, I, R, S, and Inv Route Flags
  11. Underlay and Overlay Interaction: IPsec MTU Math, TCP MSS Adjustment, and NAT Refresh Timers
  12. Practicum #3: Onboarding Branches via ZTP/Bootstrap, Configuring TLOC Extension, and OMP Path Selection
Section 4. Configuration Templates, Configuration Groups (UX 2.0), and Service-Side LAN Routing10 topics
  1. Template-Based Configuration Management: CLI Templates vs. Modular Feature Templates and CSV Variables
  2. Next-Gen Configuration (UX 2.0): Configuration Groups, Feature Profiles, Policy Groups, and Workflows
  3. Configuring Service VPNs and LAN First-Hop Redundancy (VRRP with OMP Object Tracking)
  4. Service-Side Routing — Part 1: OSPF in Service VPNs, OMP Redistribution, and DN-Bit Loop Prevention
  5. Service-Side Routing — Part 2: eBGP and iBGP in Service VPNs, AS-Path Handling, and Site of Origin (SoO)
  6. Service-Side Routing — Part 3: EIGRP Integration with SD-WAN and Backdoor Link Scenarios
  7. Configuring IP Multicast in Cisco Catalyst SD-WAN: PIM-SM, IGMP, Auto-RP, and the Overlay Replicator Role
  8. Transactional Configuration Safety: Auto-Rollback on Control Loss and CLI Template Override
  9. Troubleshooting Template Push Failures and Service-Side Routing Prefix Loss (OSPF/BGP/EIGRP to OMP)
  10. Practicum #4: Building a Configuration Group (UX 2.0) and Configuring VRRP, OSPF, BGP, and Multicast Replicator
Section 5. Cisco Catalyst SD-WAN Policies: Control, Data, AAR, and AI Predictive Routing12 topics
  1. Cisco Catalyst SD-WAN Policy Framework: Centralized vs. Localized Control and Data Policies
  2. Policy Builder Anatomy: Object Lists, Sequence Rules, Match/Action Logic, and the Default Action Trap
  3. Centralized Control Policies (Part 1): Engineering Hub-and-Spoke, Regional Mesh, and Custom Topologies
  4. Control Policies (Part 2): Traffic Engineering (Preference), End-to-End VPN Membership, and Inter-VPN Route Leaking
  5. Service Insertion and Chaining: Steering Branch Traffic Through Regional Firewalls and IPS Appliances
  6. Centralized Data Policies: Granular Traffic Steering, Remarking, and Policing by 6-Tuple and DPI
  7. Application-Aware Routing (AAR): Configuring SLA Classes, Preferred Colors, and Strict vs. Best-Effort Fallback
  8. AI Predictive Path Recommendation and Cisco ThousandEyes WAN Insights Integration
  9. Direct Internet Access (DIA) Configuration: VPN 0 NAT/PAT Overload and Central Data Center Fallback
  10. Localized Control and Data Policies: OSPF/BGP Route Policies and Device-Level Access Control Lists (ACLs)
  11. Master Policy Activation on vSmart and Troubleshooting Policies (Simulate Flows, App-Route Stats, and Counters)
  12. Practicum #5: Authoring a Comprehensive Policy (Hub-and-Spoke + Route Leaking + AAR SLA + DIA with Fallback)
Section 6. SD-WAN Security, Quality of Service (QoS), and Application QoE (App-QoE)12 topics
  1. Cisco Catalyst SD-WAN Embedded Security Architecture and the Transition to SASE
  2. Zone-Based Application-Aware Firewall (ZBFW): Security Zones, Zone-Pairs, and Stateful Session Inspection
  3. Deep Content Inspection on WAN Edge: Snort IPS, URL Filtering, AMP Malware Protection, and TLS/SSL Proxy
  4. Cisco TrustSec (SGT) Micro-Segmentation, DNS Security, and Automated Cisco Umbrella SIG Tunnels
  5. End-to-End QoS Architecture in Cisco Catalyst SD-WAN: Packet Pipeline, DSCP, qos-group, and IPsec ToS Copying
  6. Configuring Egress QoS Scheduling: Strict Priority Queue 0 (LLQ), WRR, WRED, Shaping, and Policing
  7. Advanced SD-WAN QoS: Protecting Spokes with Per-Tunnel QoS and Dynamic Adaptive QoS
  8. Application QoE (App-QoE — Part 1): Recovering Packet Loss with FEC and Packet Duplication
  9. Application QoE (App-QoE — Part 2): TCP BBR Optimization, DRE Data Deduplication, LZ Compression, and AppNav
  10. Implementing Cloud OnRamp for SaaS (M365/Webex vQoE) and Cloud OnRamp for Multicloud (AWS/Azure)
  11. Verifying and Troubleshooting Embedded Security (ZBFW/IPS/SIG), QoS Queues, and App-QoE in CLI
  12. Practicum #6: Configuring a Security Profile (ZBFW + IPS + SIG), 4-Class QoS, and Voice Protection with FEC
Section 7. Operations, Monitoring, REST API Automation, and Software Maintenance8 topics
  1. SD-WAN Access Control: Role-Based Access Control (RBAC), Resource Groups, TACACS+, RADIUS, and SAML SSO
  2. Monitoring and Reporting in SD-WAN Manager: Health Dashboards, Alarms, Events, Audit Log, Syslog, SNMP, and NetFlow
  3. Interactive Diagnostic Tools in SD-WAN Manager: Simulate Flows, Packet Capture, Trace Route, and Speed Test
  4. SD-WAN Manager REST API Architecture (Part 1): Swagger Docs, JSESSIONID Session Auth, and X-XSRF-TOKEN
  5. REST API Monitoring and Automation (Part 2): Querying /dataservice Endpoints with Postman, cURL, and Python
  6. Centralized Software Image Management: Install, Activate, Set Default, and Upgrade Auto-Rollback
  7. Disaster Recovery Operations: Backing Up the vManage Database and Zero-Touch RMA Router Replacement
  8. Practicum #7: Configuring RBAC Roles, Automating Monitoring with Python REST API, and Performing Software Upgrades
Section 8. End-to-End Troubleshooting, 300-415 ENSDWI Exam Prep, and Capstone Project6 topics
  1. End-to-End Troubleshooting #1: Control Plane and ZTP Onboarding Trouble Tickets
  2. End-to-End Troubleshooting #2: Data Plane (BFD / IPsec), TLOC Extension, and OMP Routing Trouble Tickets
  3. End-to-End Troubleshooting #3: Centralized Policy, AAR, DIA, and ZBFW Security Trouble Tickets
  4. Zero-Downtime Brownfield Migration from Legacy MPLS / DMVPN to Cisco Catalyst SD-WAN
  5. 300-415 ENSDWI v1.2 Exam Strategy and Master Reference of Commands, Ports, Policies, and REST API
  6. Capstone Project: Full Implementation of a Secure Global Cisco Catalyst SD-WAN Fabric for an Enterprise

Group and individual classes include a teacher, homework review and a certificate. The subscription gives you materials, exercises and progress tracking at your own pace, without teacher feedback.

CCNP SD-WAN (300-415 ENSDWI): implementing Cisco Catalyst SD-WAN: how to enroll

Fill in the form and we will tell you the start date of the next group, the schedule and payment terms. Or come to a free trial lesson first.

WhatsApp