Cisco SD-WAN: Configure Direct Internet Access (DIA)
#cisco #ciscosdwan #ciscotech #eve_ng #ciscosystems #ciscotraining #sdwan
00:00 Introduce and Steps Configuration
00:44 Start configuration DIA by add Default route.
01:25 Enable Default Route at Edge Device of Site, Next hop is VPN0 Interface
02:32 Enable NAT feature at VPN0 of the Site
03:35 Testing ping To Internet
03:52 Start configuration by using Centralized Policy
06:50 Steps to configure DIA by Policy
07:21 Create VPN List
07:26 Create Prefix List
07:40 Create Traffic Data Policy
08:13 Assign Traffic Data Policy to Global Policy Then Active
09:48 Check configuration by Command line
10:06 Ping Testing to Internet
--------------------
Using DIA, user can connect Internet DIA from site, no need go to DC/Hubs, but have risk from internet and can not control behaviour of users, if dont use cloud solution of Cisco (AMP, SASE...)
----------------------
Two ways to configure DIA:
1. Using default route point VPN0 per Service VPN
2. Using centralize policy.
2.1 Site lists
2.2 VPN lists
2.3 Data prefix list
2.4 Centralize traffic policy
2.5 Final, create centralize policy and apply it to vSmart.
---------------------
@NetworkLabRoom
Topology: https://imgur.com/bZG1pNL