Provides a comparison of tasks and the parties responsible for cloud management, including Cisco SD-WAN Cloud, Cloud-Pro, and Cloud-MSP services. Any functions not listed here are not monitored by Cisco. In this table, "CloudOps" refers to the Cisco SD-WAN CloudOps team.
|
Task |
Cisco SD-WAN Cloud |
Cisco SD-WAN Cloud-Pro |
Cisco SD-WAN Cloud-MSP |
Comments |
|---|---|---|---|---|
|
Provision fabrics |
||||
|
Provision fabrics from Cisco Catalyst SD-WAN Portal |
Customer |
Customer |
CloudOps |
– |
|
Monitor and troubleshoot cloud control components infrastructure |
||||
|
Monitor CPU and data disk utilization |
CloudOps |
– |
||
|
Troubleshoot loss of connectivity to network interfaces |
CloudOps |
– |
||
|
Troubleshoot failure to reach instances |
CloudOps |
– |
||
|
Monitor Cisco Catalyst SD-WAN services |
||||
|
Provide expiration notification of control component SSL certificates |
CloudOps |
– |
||
|
Monitor availability of the Cisco SD-WAN Manager web server |
CloudOps |
– |
||
|
Troubleshoot loss of control connection to the control components |
CloudOps |
– |
||
|
Manage capacity of Cisco Catalyst SD-WAN control components |
CloudOps |
CloudOps monitors and upgrades the instance capacity as defined in the Catalyst SD-WAN Recommended Computing Resources Matrix, according to the number of devices on the fabric. Cluster expansion may occur. |
||
|
Disaster Recovery |
||||
|
Capture periodic volume snapshots |
CloudOps |
In multitenancy, volume snapshots apply to the entire multitenant Cisco SD-WAN Manager cluster, not to individual tenants. |
||
|
Capture periodic configuration backups |
CloudOps |
In multitenancy, configuration backups apply to the entire multitenant Cisco SD-WAN Manager cluster, not to individual tenants. |
||
|
Capture on-demand snapshots |
– |
Customer |
Customer |
– |
|
Restore fabric based on volume or configuration |
CloudOps |
– |
||
|
Upgrade software |
||||
|
Upgrade control component software |
CloudOps |
CloudOps * |
CloudOps * |
* When the latest Recommended release is available, CloudOps will schedule a maintenance window and provide up to two weeks’ advance notice. You may reschedule up to three times or six months, whichever comes first. During the window, CloudOps will perform the upgrade.
|
|
Upgrade edge device or node software |
Customer |
– |
||
|
Upload and manage edge images in Cisco SD-WAN Manager Software Repository |
CloudOps |
Customer |
Customer |
– |
|
Other tasks |
||||
|
Onboard Cisco SD-WAN Analytics |
Not applicable * |
Customer |
Customer |
* Cisco SD-WAN Analytics is enabled by default for all Cisco Catalyst SD-WAN Cloud deployments. |
|
Assist with on-premises to cloud migration |
CloudOps |
For more details on the on-premises to cloud migration, refer to Migrate an on-premises fabric to the cloud. |
||
|
Configure custom subnets and TACACS |
– |
Customer |
Customer |
Set up custom subnets and TACACS during Day-0 provisioning. For Day-N, you can open a TAC case with CloudOps. TACACS is available for Cisco SD-WAN Cloud-MSP fabrics via MT-Edge. Refer to the Cisco Catalyst SD-WAN Systems and Interfaces Configuration Guide for more information. |
|
Renew control component certificates |
CloudOps |
Customer * |
Customer * |
* CloudOps will renew Cisco-signed certificates only. Renewing certificates you provide is your responsibility. |
|
Create Smart Accounts (SA) or Virtual Accounts (VA) on software.cisco.com and attach Cisco Catalyst SD-WAN subscribed devices to the SA and VA |
Customer |
– |
||
|
Allow external management of SA and VA on PNP Connect |
Customer |
– |
– |
Do not allow external management of SA and VA on PNP Connect before provisioning a fabric in Cisco Catalyst SD-WAN Portal. The provisioning workflow automatically enables the external management. |
|
Accept external management of SA and VA and map tenant VA to your SA and VA |
CloudOps |
– |
– |
– |
|
Define device configuration templates and policies through Cisco SD-WAN Manager |
Customer |
– |
||
|
Manage certificates for web servers |
CloudOps |
Customer * |
Customer ** |
* CloudOps can install a web certificate upon request and manage subsequent renewals of a Cisco-provided Web certificate. ** CloudOps can renew web certificates if the Cisco SD-WAN Cloud-MSP fabric is deployed in the cisco.com domain. |
|
Sync edge serials with credentials |
Not applicable * |
Customer |
Customer |
* Cisco SD-WAN Cloud customers can use their Cisco Connection Online (CCO) login credentials for SSO and syncing edge serials. |
|
Manage the allowed IP access list |
– |
Customer |
Customer |
– |
|
Configure a custom identity provider (IdP) |
– |
Customer |
Customer |
Cisco SD-WAN Cloud fabrics only support CCO as an identity provider. You can use SSO to navigate among Catalyst SD-WAN applications such as Cisco SD-WAN Manager, Cisco SD-WAN Analytics, and Cisco Catalyst SD-WAN Portal. |