Summary
Both Cisco SD-WAN and DMVPN solutions integrate well with the other domains, allowing the enterprise to extend the business intent and segmentation across the WAN environment between domains. While both solutions provide macrosegmentation via VRFs and microsegmentation by propagating the SGT value from one side of the WAN to the other, the management and configuration of the segmentation are quite different. For SD-WAN, the Catalyst SD-WAN Manager facilitates management of the SD-WAN Edge routers, whereas DMVPN requires manual configuration or use of another automation tool to manage the configurations. Additionally, DMVPN requires a unique tunnel system for each macrosegmented VRF, whereas the SD-WAN solution uses a single tunnel system with the ability to create logical topologies per VRF. In both solutions, having a single standard, such as VLAN-to-VRF mapping, used at all of the remote locations improves management and operational efficiencies.