Cisco SD-WAN vs Cisco SD-Routing: How to Choose, Migrate, and Save on the Catalyst SD-WAN Manager
A decision guide to the two IOS XE WAN edge modes managed by one single pane of glass.
Quick Answer: Cisco SD-WAN (IOS XE SD-WAN, controller mode) and Cisco SD-Routing (IOS XE SD-Routing, autonomous mode) run on the same cEdge hardware and are both managed by Catalyst SD-WAN Manager (formerly vManage). The decision is one question: do you need an overlay? Choose SD-WAN for app-aware routing, SLA steering, Cloud OnRamp multicloud, and SASE. Choose SD-Routing for plain BGP/OSPF/static WAN routing at lower TCO. Most enterprises run both in a hybrid WAN and migrate site by site.
Key Facts at a Glance
- One manager: Catalyst SD-WAN Manager (renamed vManage) configures both modes via device templates, feature templates, and configuration groups.
- SD-WAN overlay = OMP + BFD/TLOC + IPsec, segmented by service VPN (and transport VPN 0).
- SD-Routing = BGP/OSPF/static only — no overlay, no controllers for forwarding.
- Same cEdge platforms: Catalyst 8000V/C8000V, Catalyst 8500, Catalyst 8300, Catalyst 8200, ISR 4000, ASR 1000.
- SD-WAN adds centralized policy, app-aware routing, SLA, Cloud OnRamp, SASE (Zscaler/Prisma Access via SIG), DIA/NAT, service chaining, QoS.
- Both programmable: REST API, NETCONF/YANG, gNMI streaming telemetry, Terraform, Ansible, NetDevOps.
- Licensing: Cisco DNA subscription bandwidth tiers; SD-Routing is the lower-cost path.
The One Question That Decides It: Do You Need an Overlay?
Cisco SD-WAN (controller mode) builds an encrypted overlay over any transport. The cEdge joins a control plane (Manager/Controller/Validator), learns routes over OMP keyed by TLOC (system IP + color + encapsulation), measures every path with BFD, and carries traffic in service VPNs over IPsec. Cisco SD-Routing (autonomous mode) does none of that — it is standard BGP/OSPF/static routing with VRFs and ACLs. If your sites must talk over a hybrid WAN of MPLS + broadband + LTE with intelligent steering, that is SD-WAN. If they just need to route, that is SD-Routing.
Choose SD-WAN (Controller Mode) If…
- You need app-aware routing with SLA-based steering (voice/video on low latency, bulk on low cost).
- You are doing Cloud OnRamp for multicloud (AWS/Azure/GCP) or Cloud OnRamp for SaaS.
- You are converging on SASE / zero trust with a Secure Internet Gateway (SIG) to Zscaler or Prisma Access, using DIA/NAT and service chaining.
- You want centralized policy pushed from the Manager, IPsec encryption, and service VPN segmentation.
- You rely on assurance from ThousandEyes and vAnalytics.
Choose SD-Routing (Autonomous Mode) If…
- Sites are routing-only (BGP/OSPF/static) over MPLS or DIA, with no overlay to operate.
- You want lower TCO and a simpler Cisco DNA bandwidth tier.
- You still want device templates and one single pane of glass, but not the full overlay feature set.
- You are automating with NETCONF/YANG, gNMI streaming telemetry, Terraform/Ansible (NetDevOps) without vendor lock-in into overlay licensing.
Migration Path: vEdge to cEdge, Autonomous to Controller
- Inventory and baseline in Catalyst SD-WAN Manager; export device templates/feature templates.
- Replace vEdge with cEdge (Catalyst 8000V/C8000V, 8500/8300/8200, ISR 4000, ASR 1000) in waves; keep autonomous mode first if you want routing-only.
- Flip to controller mode per site for SD-WAN migration / MPLS migration offload; validate OMP/BFD and app-aware routing.
- Layer on SASE/Cloud OnRamp and service chaining last.
- Automate the whole journey with intent-based networking and NetDevOps pipelines.
Cost, Licensing, and Lock-In
Both modes ride Cisco DNA subscription bandwidth tiers. SD-WAN carries the richer feature set and higher TCO; SD-Routing improves ROI for routing-only sites. Either way you accept some vendor lock-in into the Cisco ecosystem in exchange for a coherent stack, TAC support, and a Cisco Validated Design (CVD). Model CapEx (hardware) and OpEx (subscriptions + operations) per site before you pick a mode.
Quick Decision Matrix
| Requirement | SD-WAN (controller) | SD-Routing (autonomous) |
|---|---|---|
| Encrypted overlay / segmentation | IPsec + service VPN | VRFs / L3VPN |
| Application steering | App-aware routing + SLA | Routing table only |
| Cloud & security | Cloud OnRamp multicloud + SASE/SIG | Standard IOS XE security |
| Operations dependency | Needs Manager/Controller/Validator | Forwards standalone |
| Automation | Templates + REST API/Terraform/Ansible | NETCONF/YANG/gNMI + NetDevOps |
| Relative cost | Higher TCO | Lower TCO/better ROI |
Frequently Asked Questions
Is Catalyst SD-WAN Manager the same as vManage?
Yes — Catalyst SD-WAN Manager is the renamed vManage, now positioned as the single manager for both SD-WAN and SD-Routing edges.
Can I manage SD-Routing from Catalyst SD-WAN Manager?
Yes. Autonomous-mode devices are onboarded and configured with device templates/feature templates, giving one single pane of glass.
cEdge vs vEdge?
cEdge is the IOS XE successor to vEdge (Catalyst 8000V/C8000V, 8500/8300/8200, ISR 4000, ASR 1000) and runs both modes; it is the migration target for aging vEdge fleets.
Is SD-Routing cheaper than SD-WAN?
Generally yes — same hardware, lower Cisco DNA bandwidth tier, no overlay/SASE features — better TCO/ROI for routing-only sites.
Can I run both in one fabric?
Yes — a hybrid WAN with SD-WAN branches and SD-Routing routing-only sites, all visible in Catalyst SD-WAN Manager, migrated site by site.
Final Take
Ask one question: do you need an overlay? If yes — app-aware routing, SLA steering, Cloud OnRamp multicloud, or SASE — choose controller mode. If you just need solid BGP/OSPF routing at a better price — choose autonomous mode. The smartest networks run both, migrate vEdge to cEdge in waves, and drive it all with Terraform, Ansible, and NetDevOps from a single pane of glass.
