# Cisco SD-WAN Controllers Installation **URL:** \ **Category:** Lessons Discussion\ **Created:** [July 12, 2021, 12:30pm UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869 "2021-07-12T12:30:52Z")\ **Posts on this page:** 20\ **Page:** 2
**Author:** ![ramizendah](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/r/fbc32d/32.png) [@ramizendah](https://forum.networklessons.com/u/ramizendah)\ **Post date:** [March 16, 2022, 9:08am UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/22 "2022-03-16T09:08:39Z")
Hello everyone I generated a private key. BUT when I tried create a root CA certificate using the private key we just created: ```auto vManage1:~$ openssl genrsa -out ROOT-CA.key 2048 Generating RSA private key, 2048 bit long modulus ................. ............................. e is 65537 (0x10001) vManage1:~$ openssl req -x509 -new -nodes -key ROOT-CA.key -sha256 -days 3652 \ ab.nwl.ai" \ps://cdn.networklessons.com/C=NL/ST=NL/O=nwl-lab-sdwan/CN=vmanage1.la > -out ROOT-CA.pem ***Subject does not start with '/'.*** ***problems making Certificate Request*** vManage1:~$ ``` ---
**Author:** ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)\ **Post date:** [March 18, 2022, 6:03am UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/23 "2022-03-18T06:03:16Z")
Hello Rami Hmm, I suggest you take a look at these issues to see if you can troubleshoot the problem. First of all, your command to create the root CA certificate seems to be a bit off in your post. I think it may have to do with the way you pasted it. However, you must make sure that it appears as in the lesson. Notice that Rene states that it is a “one-liner” which means you can copy and paste it as-is from the lesson. Notice that’s what he did in the video as well. It should be copied and pasted exactly like so: ```auto openssl req -x509 -new -nodes -key ROOT-CA.key -sha256 -days 3652 \ -subj "https://cdn.networklessons.com/C=NL/ST=NL/O=nwl-lab-sdwan/CN=vmanage1.lab.nwl.ai" \ -out ROOT-CA.pem ``` After doing a bit of research I have found that even if the command is issued correctly, this type of error is also seen in other cases where root CA certificates are created, and it can be due to a bug. You can attempt to issue the command without a subject if you like since that is optional. This may resolve the problem. Try it out and let us know how you get along! I hope this has been helpful! Laz ---
**Author:** ![wali1972](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/w/858c86/32.png) [@wali1972](https://forum.networklessons.com/u/wali1972)\ **Post date:** [May 11, 2022, 6:29pm UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/24 "2022-05-11T18:29:09Z")
Hello Rene bizinternet and public internert, are these routers or switches? how is the connectivity of these? ---
**Author:** ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)\ **Post date:** [May 14, 2022, 9:03am UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/25 "2022-05-14T09:03:18Z")
Hello Wali The biz-internet and public-internet “clouds” in the diagram represent the WANs that businesses can use to connect their vEdge devices. This topology is created within EVE-NG, and the clouds are entities created by the emulator. Take a look at this lesson to see the process with which the clouds, and the rest of the topology, were created. > **[Cisco SD-WAN EVE-NG Lab Installation](https://networklessons.com/cisco/cisco-sd-wan/cisco-sd-wan-eve-ng-lab-installation)** > > This lesson explains how to install EVE-NG and all required images so you can build your own Cisco SD-WAN lab. I hope this has been helpful! Laz ---
**Author:** ![wali1972](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/w/858c86/32.png) [@wali1972](https://forum.networklessons.com/u/wali1972)\ **Post date:** [May 17, 2022, 9:50pm UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/26 "2022-05-17T21:50:48Z")
Would you please let me know why is this error while configuring vBond1 ```auto vedge(config-vpn-0)# exit vedge(config)# commit Aborted: 'vpn 0' : Only one tunnel-interface with color "default" allowed. ``` ---
**Author:** ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)\ **Post date:** [May 21, 2022, 3:45pm UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/27 "2022-05-21T15:45:52Z")
Hello Wali Take a look at the configuration of any and all tunnel interfaces on your vEdge device. The tunnel interfaces can be assigned “colors” which are used to distinguish between the WAN tunnels being created. It looks like you have more than one tunnel interface with the color “default” (which is the default color when no other color is assigned). This is not allowed since there will be no way to distinguish between them, unless the colors are different. Do you have more than one VPN 0 on your vEdge device? The problem here is not specific to the vBond configuration but to the colors on the tunnel interfaces. For more information about configuring the color on tunnel interfaces take a look at the vEdge onboarding lesson, and specifically, at the VPN0 underlay network section that details how to configure colors: > **[Cisco SD-WAN vEdge Onboarding](https://networklessons.com/cisco/cisco-sd-wan/cisco-sd-wan-vedge-onboarding)** > > This lesson explains how to onboard Cisco SD-WAN vEdge routers with the vManage, vBond, and vSmart controllers. I hope this has been helpful! Laz ---
**Author:** ![parist66](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/p/c6cbf5/32.png) [@parist66](https://forum.networklessons.com/u/parist66)\ **Post date:** [June 2, 2022, 10:41pm UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/28 "2022-06-02T22:41:54Z")
![image](https://cdn-forum.networklessons.com/uploads/default/original/2X/0/08ce1c482d736dd91a23a34b193b7cd4bdbd1a41.png) Please help. ---
**Author:** ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)\ **Post date:** [June 5, 2022, 5:36am UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/29 "2022-06-05T05:36:51Z")
Hello Paris I’m going to state the obvious 😇 . Are your username and password correct? I assume they are. But still, there seems to be an authentication issue. Can you give us some more info about where in the installation you are at? Is this the addition of the vBond controller? Let us know… I hope this has been helpful! Laz ---
**Author:** ![parist66](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/p/c6cbf5/32.png) [@parist66](https://forum.networklessons.com/u/parist66)\ **Post date:** [June 5, 2022, 1:50pm UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/30 "2022-06-05T13:50:36Z")
Yes, thank you for the response. I can’t get it to work still even after going through the steps multiple times. I am stuck at step 1.2.1 Start Up Configuration. I’ll go through and try it again. ---
**Author:** ![aysar3000](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/a/b2d939/32.png) [@aysar3000](https://forum.networklessons.com/u/aysar3000)\ **Post date:** [January 2, 2023, 7:52am UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/31 "2023-01-02T07:52:53Z")
I have just a small q You have all sd-wan devices routed 0.0.0.0/0 to 10.1.0.254 Which device represent the 10.1.0.254 ---
**Author:** ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)\ **Post date:** [January 5, 2023, 6:57am UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/32 "2023-01-05T06:57:22Z")
Hello Aysar All controllers are placed on VLAN 10 which is configured in the DC1 switch. This VLAN uses the 10.1.0.0/24 subnet. The 10.1.0.254 address is the default gateway for that subnet which is assigned to the VLAN 10 SVI of the switch. This is explained in the [first video under the **Configuration** heading](https://networklessons.com/ciscocisco-sd-wan/cisco-sd-wan-controllers-installation#Configuration) starting at Chapter 4 of the video at 4:41. I hope this has been helpful! Laz ---
**Author:** ![aysar3000](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/a/b2d939/32.png) [@aysar3000](https://forum.networklessons.com/u/aysar3000)\ **Post date:** [January 6, 2023, 6:09am UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/33 "2023-01-06T06:09:18Z")
Thanks dear for your reply ---
**Author:** ![jvccp7](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/j/278dde/32.png) [@jvccp7](https://forum.networklessons.com/u/jvccp7)\ **Post date:** [January 13, 2023, 10:01pm UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/34 "2023-01-13T22:01:31Z")
```auto ValueError: source code string cannot contain null bytes Fatal Python error: init_import_size: Failed to import the site module Python runtime state: initialized Traceback (most recent call last): File "/usr/lib/python3.8/site.py", line 73, in import os ``` I am trying to config vManage with image 20.10.1 and I am getting the error below. any advice? ---
**Author:** ![kotadiyapratik](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/k/df705f/32.png) [@kotadiyapratik](https://forum.networklessons.com/u/kotadiyapratik)\ **Post date:** [March 25, 2023, 8:04am UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/35 "2023-03-25T08:04:33Z")
Hi Rene, Unable to generate a certificate in Vmanage: ![image](https://forum.networklessons.com/uploads/default/original/2X/c/c00895d49ab5b7d54f9d98e7397cc0df128df1ec.png) ---
**Author:** ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\ **Post date:** [March 28, 2023, 6:46am UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/36 "2023-03-28T06:46:48Z")
Hi Pratik, What version of vManage do you use? Rene ---
**Author:** ![kotadiyapratik](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/k/df705f/32.png) [@kotadiyapratik](https://forum.networklessons.com/u/kotadiyapratik)\ **Post date:** [March 29, 2023, 3:05am UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/37 "2023-03-29T03:05:48Z")
Hi Rene, I’m using Vsmart 20.7.1 ---
**Author:** ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\ **Post date:** [March 30, 2023, 10:30am UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/38 "2023-03-30T10:30:15Z")
Hi @kotadiyapratik , It seems that in your example, it cut off part of the command. It ends with “CN=vmanage1.la” instead of “CN=vmanage1.lab.nwl.ai -out ROOT-CA.pem”. Can you try pasting it again? ```auto openssl req -x509 -new -nodes -key ROOT-CA.key -sha256 -days 3652 \ -subj "https://cdn.networklessons.com/C=NL/ST=NL/O=nwl-lab-sdwan/CN=vmanage1.lab.nwl.ai" \ -out ROOT-CA.pem ``` Or as a oneliner without the ` break line:` ` ```auto openssl req -x509 -new -nodes -key ROOT-CA.key -sha256 -days 3652 -subj "https://cdn.networklessons.com/C=NL/ST=NL/O=nwl-lab-sdwan/CN=vmanage1.lab.nwl.ai" -out ROOT-CA.pem ``` Rene` ---
**Author:** ![kotadiyapratik](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/k/df705f/32.png) [@kotadiyapratik](https://forum.networklessons.com/u/kotadiyapratik)\ **Post date:** [March 30, 2023, 2:00pm UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/39 "2023-03-30T14:00:19Z")
Thanks Rene. Again i am stuck on below step while requesting from Vbond ![image](https://forum.networklessons.com/uploads/default/original/2X/d/d448617d560461a523b7330408edb7cf2cd13be0.png) ---
**Author:** ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\ **Post date:** [March 31, 2023, 12:21pm UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/40 "2023-03-31T12:21:29Z")
Is vBond1 only in VPN 512? Your ping in 512 works, but I can’t tell in which VPN it tries to do `request download scp`. In my examples, I used VPN 0 on the controllers and vedges for onboarding. The other option is that for some reason, SSH server is not running on vManage. That’s something you can check too. Rene ---
**Author:** ![kotadiyapratik](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/k/df705f/32.png) [@kotadiyapratik](https://forum.networklessons.com/u/kotadiyapratik)\ **Post date:** [April 4, 2023, 5:28pm UTC](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869/41 "2023-04-04T17:28:27Z")
Hi Rene, After restarting to vEdge Router issue get resolved but if I’m restarting the vManage then all configuration getting erased and unable to export the config in EVE-NG. Sometime i must have to stop the SD-WAN Lab when need to restart the Server but in that case, vManage getting erase and on boarding vedge,vBond etc getting empty in vManage in the EVE-NG Lab. Please help in this case if have a shortcut solution or alternative solution. [Previous page](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869.md?page=1) [Next page](https://forum.networklessons.com/t/cisco-sd-wan-controllers-installation/14869.md?page=3)