For Sponsored Posts & Articles, please email us on 📧 networks.baseline@gmail.com

Purpose of TLOC in Cisco Viptela SDWAN

TLOC is one of the major term used in the Cisco Viptela SDWAN solution. TLOC is generally used as static identifier on Cisco Viptela SDWAN vEdge device and also used for underlay network attachment.

TLOC routes classify transport locations. These are sites in the overlay network that connect to physical transport, such as the point at which a WAN interface connects to a carrier. A TLOC is signified by a 3-tuple that contains of the system IP address of the OMP speaker, a color, and an encapsulation type.

Fig 1.1- Cisco SDWAN TLOC

Cisco Viptela term TLOC color as Public and Private. Dont confuse with the color, color is basically used to categorized WAN circuits on vEdges. The specific color used is categorized as Private or Public.

  • Private Colors (mpls, private1, private 2, private 3, private 4, private 5, private 6 and metro-ethernet)
  • Public Colors (red, blue, public-internet, Biz-internet)
Note: Color setting applies to WAN Edge to WA Edge Communication and WAN Edge to Controller Communication. 

Well, Colors used in the SDWAN influence the data plane endpoint selection to ensure the most optimal connectivity. Domain with respect to the NAT should use Private endpoints, and Public Endpoints. MPLS uses Private Color, Internet uses Public Color. Connectivity optimized within and across domains. 

Setup of IPSEC tunnel 
For every TLOC on a vEdge router, the vEdge router advertises a symmetric key for encryption. The vSmart controller reflects this key automatically and advertises the TLOC with the symmetric key. 

A two-way IPsec SA is set up as a result, which means two different keys will be setup and data traffic automatically starts to use this IPsec tunnel. Once a tunnel is up, BFD automatically starts on the tunnel. 

This is done to ensure fast data plane convergence in the event of a failure in the transport network. Note that the setup of the IPsec data plane happens automatically. No configuration is necessary.


Check the below commands for TLOCs
NDNA_vEdge# show omp tlocs
NDNA_vEdge# show omp tlocs advertised
NDNA_vEdge# show omp tlocs received
NDNA_vEdge# show omp tlocs details
NDNA_vEdge# show bfd tloc-summary-list