Cisco SD-WAN architecture is divided into three main planes:
Management Plane
Handled by vManage
Used for configuration and monitoring
Control Plane
Handled by vSmart (OMP protocol)
Responsible for routing information exchange and policy distribution
Data Plane
Built using IPsec tunnels between WAN Edge devices
Responsible for forwarding actual user/application traffic between sites
The data plane is the plane that:
Carries user traffic
Transports data between SD-WAN sites
Uses secure tunnels (IPsec) for communication
A. IPsec IPsec is a technology used within the data plane, not a plane itself.
B. Management Used for configuration and orchestration, not traffic forwarding.
D. Control Used for routing and policy decisions, not actual traffic transport.
Memorize SD-WAN planes:
Management Plane → vManage (configuration)
Control Plane → vSmart (routing/policy via OMP)
Data Plane → IPsec tunnels (user traffic transport)
User traffic = Data Plane
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit