Exam 300-415 topic 1 question 167 discussion

In the reference link under the 'Control Plane Authentication' part, you can find the following: Then, during the automatic authentication process, as pairs of devices (routers and controllers) are establishing DTLS control connections, each device compares the serial numbers (and for routers, the chassis numbers) to those in the files installed on the router. DTLS is the connection that facilitates the exchange of OMP information between the devices. In vManage the number of control connections also shows the amount of DTLS connections to/from a device. OMP is not the control connection, it's the control plane management protocol. B is correct, DTLS

Both DTLS and OMP are true since the specific devices have not been mentioned! The wording of the question should be reviewed

Why the owners dont correct the answers???

B due to the way the question is asked. Poor wording. If it said exchange routing information then I'd say omp.

DTLS is correct

"which protocol is used". Otherwise they would have said : Routing protocol. So, DTLS is the only one possible. B

DTLS – between vSmarts, vManage and vBond permanently DTLS – between vSmart to vEdge permamently (DTLS or TLS). DTLS – between vBond to vEdge temporarily during vEdge onboarding. OMP – Only carries routing information between vSmart and vEdges and vSmart to vSmart vBond orchestrators always use DTLS tunnels to establish control connections with other devices, so they always use UDP. The UDP port is 12346

DTLS: "vpn 0 interface tunnel-interface control-connections—Attempt to establish a DTLS or TLS control connection for a TLOC (on vEdge routers only). This is the default behavior. " https://www.cisco.com/c/en/us/td/docs/routers/sdwan/command/sdwan-cr-book/config-cmd.html#wp4894365670

Not a good question. I would go with B though. vManage directly to edge device is NOT OMP for example when distributing a localized policy. All devices have at minimum DTLS connection to one another. Excluding the vBond after the edge gets authenticated.

B is correct

A simple "show control connection" from a Vedge will answer this question, in my opinion is taking about connection from vedges to controlllers, So we are taking DTLS

OMP (Overlay Management Protocol)—The OMP protocol is a routing protocol similar to BGP that manages the Cisco SD-WAN overlay network. OMP runs inside DTLS control plane connections and carries the routes, next hops, keys, and policy information needed to establish and maintain the overlay network. OMP runs between the Cisco vSmart Controller and the vEdge routers and carries only control plane information. The Cisco vSmart Controller processes the routes and advertises reachability information learned from these routes to other vEdge routers in the overlay network.

The control connection means " Vsmart to Vedge " Communication , so OMP is the correct Answer .

DTLS is also a valid answer. because OMP is only running between vSmart to vSmart and vEdge to vSmart not across SD-WAN Devices.