Underlay Routing Considerations for Cisco SD-WAN

May 21, 2024
8 min read

JasonLake

Table of Contents

Quick navigation12 sections

When deploying a Cisco SD-WAN solution, understanding the intricacies of underlay routing is critical for ensuring efficient, secure, and reliable network performance. The following are key points and tips to consider:

  • Understanding the Role of Underlay Networks in SD-WAN
  • Choosing the Right Transport Networks
  • IP Addressing and Subnet Planning
  • BGP Configuration and Optimization
  • QoS Considerations for Underlay Traffic

Understanding the Role of Underlay Networks in SD-WAN

Underlay networks form the foundational layer over which the SD-WAN overlays operate. These physical connections, often involving multiple transport technologies such as MPLS, broadband internet, and LTE, are crucial for carrying encapsulated data packets across different geographical locations. A well-designed underlay facilitates improved bandwidth usage, lower latency, and enhanced data throughput by providing multiple routing paths for redundancy and load balancing.

Choosing the Right Transport Networks

Selecting appropriate transport networks for the underlay is essential. Diverse transports provide the resiliency needed during link failures and traffic surges. Enterprises must assess factors such as availability, bandwidth costs, performance metrics, and geographic distribution of network resources when deciding on the transport mediums to incorporate in their SD-WAN underlay configuration.

IP Addressing and Subnet Planning

Efficient IP addressing and subnetting strategies are vital for a scalable underlay network. Developing a coherent plan that includes address allocation, address summarization, and avoiding address conflicts is necessary to enable hassle-free scalability and management. Proper IP planning ensures that networks remain organized and simplifies the administration of routing protocols used within the underlay.

BGP Configuration and Optimization

Border Gateway Protocol (BGP) plays a pivotal role in managing routing decisions across large and complex networks including those used in SD-WAN underlays. Configuring BGP to optimize route advertisement and selection enhances network resilience and performance. It is also essential to implement BGP attributes like AS-Path, Local Preference, and MED accurately to direct and control routing decisions effectively. Learn more about SD-WAN with our Self-Paced Training.

QoS Considerations for Underlay Traffic

The Quality of Service (QoS) must be carefully configured to prioritize essential data traffic within the underlay, particularly for real-time applications such as VoIP and video conferencing. Implementing advanced QoS policies helps in maximizing underlay network resource usage while guaranteeing performance integrity during peak loads and various traffic conditions.

Segment Routing Integration for Path Optimization

Integrating Cisco Segment Routing (SR) with SD-WAN adds a powerful layer of path control on top of the underlay. Segment Routing optimizes both the routing process and network resource utilization by explicitly defining the path that data packets take through the network. When combined with SD-WAN, this results in streamlined control of packet-forwarding paths that can be aligned with organizational priorities such as cost reduction, performance improvement, or security compliance.

One of the most practical benefits for the underlay is intelligent path selection. By steering traffic along the most cost-effective paths, enterprises can reduce their reliance on expensive MPLS circuits in favor of cheaper broadband connections without sacrificing reliability or performance. This directly complements the transport decisions discussed earlier, helping keep underlay costs down as the network scales. To understand the nuances of Segment Routing and its practical applications, consider exploring the Self-Paced SR Training.

Monitoring and Managing Network Performance

Effective monitoring and management of network performance are crucial in SD-WAN architectures, especially in the underlay that supports the overlay services. Utilizing network monitoring tools and SD-WAN's inherent capabilities to provide real-time visibility and control can help identify potential issues before they escalate into serious problems. Network administrators should employ comprehensive metrics such as jitter, latency, packet loss, and bandwidth usage to ensure the underlay performs optimally. A centralized control plane, combined with advanced analytics, further simplifies this task by offering insights into performance, user behavior, and potential security threats across all network nodes from a single vantage point.

Security Considerations for the Underlay

While SD-WAN provides enhanced security features at the overlay level, securing the underlay is just as important to safeguard against threats and vulnerabilities that could affect the entire network. Applying robust security measures such as encryption, next-generation firewalls, and intrusion detection/prevention systems at the underlay can substantially mitigate risks and protect data confidentiality and integrity as it traverses disparate network segments.

Dealing with Vendor Interoperability

Implementing Cisco SD-WAN often involves integrating hardware and software from multiple vendors. Underlay networking components from different manufacturers need to communicate effectively without causing conflicts or performance degradation. Fostering vendor interoperability within the underlay requires meticulous planning, adherence to open standards, and sometimes the deployment of additional integration tools to maintain seamless operation between disparate technologies.

Planning for Scalability and Future Growth

As organizations grow, so do their networking needs. Designing an SD-WAN underlay with scalability in mind is imperative. This approach involves modular network design principles, such as hierarchical network models and scalable addressing schemes, which accommodate future additions and modifications without significant overhauls. Keeping scalability at the forefront ensures that the network can adapt to evolving business requirements without excessive additional investment or disruption.

Regular Updates and Maintenance

Keeping the SD-WAN underlay network updated and properly maintained is essential for continuous operation and security. Regular updates, patches, and maintenance cycles prevent vulnerabilities, improve efficiencies, and extend the lifecycle of network components. Organizations should establish a routine schedule for these activities and follow best practices for update testing and deployment to avoid disruptions in network services.

Conclusion

Understanding the underlay routing considerations is paramount for anyone deploying or managing Cisco SD-WAN. From choosing the right transport networks to securing and regularly maintaining the underlay, each aspect plays a vital role in the overall performance and reliability of the network. Layering technologies such as Segment Routing on top of a well-planned underlay bridges these components effectively, ensuring that the SD-WAN can deliver its full range of benefits, including improved network agility, cost savings, and enhanced security. Ensuring your deployment aligns with best practices is also critical in facing the challenges of modern network environments and future-proofing your enterprise infrastructure.

Related Courses

Enhance your knowledge with these recommended courses

Cisco SD-WAN Training By Navid Yahyapour

Cisco SD-WAN Training By Navid Yahyapour

Cisco Viptela SD-WAN training and certification courses online prepare you for the Cisco ENSDWI 400-315 exam and real-life deployments. Cisco Viptela SDWAN Design and deployment in this comprehensive course

Become an Instructor

Share your knowledge and expertise. Join our community of instructors and help others learn.

Apply Now
JasonLake

About the Author

JasonLake

I'm a network engineer who works for 8 years in the industry. I am trying to help people through my blogposts. Welcome to my blogs.

Share this Article

Related Articles

VPNAugust 25, 2024

How GRE over IPsec Works with Multi-Protocol Label Switching (MPLS)

How GRE over IPsec Works with Multi-Protocol Label Switching (MPLS) In today's interconnected network environment, ensuring robust security while maintaining efficiency in data transmissions is paramount. GRE (Generic Routing Encapsulation)...

Read Article
VPNAugust 25, 2024

What is GetVPN? An Introduction to Secure Communication

What is GetVPN? An Introduction to Secure Communication Have you ever wondered how businesses ensure their data transfers remain confidential, particularly when transmitted across unsecured networks like the internet? Enter...

Read Article
VPNAugust 25, 2024

GRE vs. IPsec: Differences and When to Use Each

GRE vs. IPsec: Differences and When to Use Each In the realm of network security and VPNs, understanding the nuances between different tunneling protocols is crucial for optimizing and securing...

Read Article
VPNAugust 25, 2024

Top Security Benefits of Using GRE over IPsec

Top Security Benefits of Using GRE over IPsec Exploring the Enhanced Security Features of GRE over IPsec When it comes to setting up secure network connections, the debate between using...

Read Article
VPNMay 21, 2024

Cisco SD-WAN vs. Versa SD-WAN Comparison

Software-defined Wide Area Network (SD-WAN) technology has transformed the way enterprises approach networking, offering greater flexibility, increased security, and enhanced management capabilities. Among the leading providers in this space are...

Read Article
VPNMay 21, 2024

What is OMP - Overlay Management Protocol in Cisco SD-WAN

As organizations increasingly adopt cloud technologies and services, the necessity for advanced networking solutions becomes urgent. Cisco's SD-WAN technology addresses these needs with several protocols, one of which is the...

Read Article

Subscribe for Exclusive Deals & Promotions

Stay informed about special discounts, limited-time offers, and promotional campaigns. Be the first to know when we launch new deals!