When a WAN Edge joins the SD-WAN fabric, which tunnels are established?

When a WAN Edge router joins the SD-WAN fabric, it first establishes a secure control plane connection. This is a DTLS (Datagram Transport Layer Security) or TLS (Transport Layer Security) tunnel to the vSmart controller. This tunnel is used for exchanging routing information and policies. Simultaneously, the WAN Edge router establishes IPsec (Internet Protocol Security) tunnels to other WAN Edge routers. These IPsec tunnels form the data plane, carrying user traffic securely across the SD-WAN fabric. Incorrect options: DTLS or TLS to vSmart and IPsec to vBond: While vBond is involved in the initial orchestration, the primary control plane tunnel is to vSmart, and data plane tunnels are between WAN Edges. DTLS or TLS to vBond and IPsec to vManage: vBond is for initial authentication/orchestration, not the primary control plane. vManage is for management, not direct data plane tunnels. DTLS or TLS to vBond and IPsec to other WAN Edge routers: Again, the control plane tunnel is to vSmart, not vBond.