![\"\"\/](\"https:\/\/www.cisco.com\/c\/dam\/en\/us\/td\/i\/400001-500000\/460001-470000\/466001-467000\/466019.jpg\")
<\/figure>\n\n\n\nTransport Profile = Colour or the transports you will be using such as MPLS, Business Internet, and which VPN it is under (0 Transport or Management 512).<\/p>\n\n\n\n
System Profile = Consists of AAA, Banner, BFD, Logging, NTP etc<\/p>\n\n\n\n
Service Profile = Consists of the Overlay Servive VPN like 1-500 etc<\/p>\n\n\n\n
When you choose which Features to add into the Feature Profile this is called ‘Parcel’. So if you wanted to setup Logging you would include the logging Parcel into the System Profile (Feature Profile).<\/p>\n\n\n\n
From Cisco Website – Definitions<\/p>\n\n\n\n
The Configuration Group feature provides a simple, reusable, and structured approach for the configurations in Cisco Catalyst SD-WAN.<\/p>\n\n\n\n
- \n
- Configuration Group:<\/strong> A configuration group is a logical grouping of features or configurations that can be applied to one or more devices in the network managed by Cisco Catalyst SD-WAN. You can define and customize this grouping based on your business needs.<\/li>\n\n\n\n
- Feature Profile:<\/strong> A feature profile is a flexible building block of configurations that can be reused across different configuration groups. You can create profiles based on features that are required, recommended, or uniquely used, and then put together the profiles to complete a device configuration.<\/li>\n\n\n\n
- Feature:<\/strong> A feature profile consists of features. Features are the individual capabilities you want to share across different configuration groups.<\/li>\n<\/ul>\n\n\n\n
Restrictions for Configuration Groups<\/h2>\n\n\n\n
- \n
- You can associate a device to either a configuration group or a device template, but not both.<\/li>\n\n\n\n
- You can add a device to only one configuration group.<\/li>\n\n\n\n
- You can add only one tag rule to a configuration group.<\/li>\n\n\n\n
- (Minimum supported release: Cisco Catalyst SD-WAN Manager Release 20.12.1) You can only apply the dual device configuration group to a site with two or less devices. For additional devices in the same site, use a single device configuration group.<\/li>\n<\/ul>\n\n\n\n
https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/routers\/sdwan\/configuration\/system-interface\/ios-xe-17\/systems-interfaces-book-xe-sdwan\/configuration-groups.html<\/a><\/p>\n\n\n\n
Deploy Cisco SD-WAN Devices Using Configuration Groups<\/h2>\n\n\n\n
As a minimum, you need system and transport Profiles to be setup in order for Config group to work.<\/p>\n\n\n\n
In my previous blog I wrote about Configuration Groups, this session I will demonstrate how to configure Config Groups.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-3.png\")
<\/a><\/figure><\/div>\n\n\nClick on Configuration > Templates<\/p><\/p>\n\n\n\n
<\/p>\n\n\n\n
Add Configuration Group<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-4.png\")
<\/a><\/figure><\/div>\n\n\nClick Create Configuration Group<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-5.png\")
<\/a><\/figure><\/div>\n\n\nAs usual give the Config Group a name and this time Config Group Description is now Optional.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-6.png\")
<\/a><\/figure><\/div>\n\n\nThis is where you begin to configure your config group. For this example I have skipped the Site types \u2013 Site Types give you the option if it were dual connectivity etc.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-7.png\")
<\/a><\/figure><\/div>\n\n\nWith Site Settings<\/strong> you can configure a password for either or all devices.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-8.png\")
<\/a><\/figure><\/div>\n\n\nWAN Interfaces allow you to configure your VPN0 transports. So you can add the Colour, whether it is Static IP, interface it is connected at VPN0 and the IP address of the interface. Think of this part as the Templates where you create a VPN Interface template then a VPN template but instead you can do this in one go. Exactly why this is a lot quicker and smoother method than traditional Templates.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-9.png\")
<\/a><\/figure><\/div>\n\n\nYou can then add the WAN routing whether you want static IP or running a Routing Protocol. In this example I used a static default route and chose which interface (GigabitEthernet1) and the IP address of that interface. You also add the next hop of the neighbouring router.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-10.png\")
<\/a><\/figure><\/div>\n\n\nOn this Section \u2013 You configure the Service VPN, which includes the interface it will belong to and the IP address\/subnet. Now prior to v20.8.x, you still had to create a template. In this example, you will need to create a VPN interface, VPN template. Now you can configure this in one go.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-11.png\")
<\/a><\/figure><\/div>\n\n\nOnce done you can go ahead to create a Config Group.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-12.png\")
<\/a><\/figure><\/div>\n\n\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-13.png\")
<\/a><\/figure><\/div>\n\n\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-14.png\")
<\/a><\/figure><\/div>\n\n\nNow the Config Group is complete, you can now attach devices to this config group.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-15.png\")
<\/a><\/figure><\/div>\n\n\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-16.png\")
<\/a><\/figure><\/div>\n\n\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-17.png\")
<\/a><\/figure><\/div>\n\n\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-18.png\")
<\/a><\/figure><\/div>\n\n\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-19.png\")
<\/a><\/figure><\/div>\n\n\nOnce you have attached your device, this is where you fill in the Variable Parameters which you have set as Device Specific.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-20.png\")
<\/a><\/figure><\/div>\n\n\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-21.png\")
<\/a><\/figure><\/div>\n\n\nOnce you have deployed this Config Group you can check the status of it.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-22.png\")
<\/a><\/figure><\/div>\n\n\nIn theory, this should be Success with a Green Tick!<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-23.png\")
<\/a><\/figure><\/div>\n\n\nNow to check if the changes you made have been successful and applied the config, go to Monitor and Devices.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-24.png\")
<\/a><\/figure><\/div>\n\n\nA Feature profile is where you attach profiles to a Config Group. Feature Profiles are similar to Feature Templates but instead you can configure multiple feature Parameters into a profile. An example is under the System Profile \u2013 you can configure AAA, MOTD Banner etc and all go into the same Feature Profile. Previously without Config Groups, you\u2019d need to create multiple Feature Templates, so if you wanted a Banner, you would need a Banner Template, same for AAA etc.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-25.png\")
<\/a><\/figure><\/div>\n\n\nUnder the Config Group you can edit this so in this example you can see what Feature profiles have been attached already. In this example I have already created a VPN 20 and 10. Now I\u2019d like to create another VPN 3 for Guest however the Config Group and Feature Profiles have already been configured so I will Edit the Config Group and in the Service Feature profile.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-26.png\")
<\/a><\/figure><\/div>\n\n\nAs you can see I have only VPN10 and 20 with the interfaces created that belong to the specific VPN. Just click Add Feature to begin with.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-27.png\")
<\/a><\/figure><\/div>\n\n\nSelect Service VPN.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-28.png\")
<\/a><\/figure><\/div>\n\n\nThis is where you can then configure the VPN.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-29.png\")
<\/a><\/figure><\/div>\n\n\nYou then Add a sub-feature where it will be equivalent to your VPN interface template.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-30.png\")
<\/a><\/figure><\/div>\n\n\nI\u2019ve configured a loopback interface which belongs to VPN3.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-31.png\")
<\/a><\/figure><\/div>\n\n\nIn this example I have only used 3 Feature Templates.<\/p>\n\n\n
\n![\"\"](\"http:\/\/jaychou.co.uk\/wp-content\/uploads\/2024\/07\/image-32.png\")
<\/a><\/figure><\/div>\n\n\nI have included the other Feature Profiles, as an example you can create other Feature Profiles.<\/p>\n","protected":false},"excerpt":{"rendered":"
Configuration Groups was created in v 20.9.x, this is due to the lack of flexibility in feature Tempates. With Feature Templates you could assign them to different devices but lacking the flexibility. Now with Configuration Group (image below from Cisco Site) you can essentially create a Group which consists of Feature Profiles that allows you … Continue reading Configuration Groups<\/span>
- Feature Profile:<\/strong> A feature profile is a flexible building block of configurations that can be reused across different configuration groups. You can create profiles based on features that are required, recommended, or uniquely used, and then put together the profiles to complete a device configuration.<\/li>\n\n\n\n