Guest users at a venue ride Catalyst SD-WAN to a secure internet gateway over the public internet. Staff use an MPLS handoff into a private cloud. What is the guest path?
Select an answer to reveal the explanation.
Short Explanation
The guests are on the public overlay, and the staff private handoff is a different road. You treat the guest path as Catalyst SD-WAN over the internet to the secure internet gateway. It is not the MPLS handoff, and it is not a breakout with no overlay.
Full Explanation
Catalyst SD-WAN internet connectivity is the public underlay plus the overlay, here steered to a secure internet gateway. That is the guest path. The staff MPLS handoff is private connectivity into a cloud and does not become the guest path because both exist at the same venue. A colocation cross-connect needs a cage and a physical circuit the guests are not using. Direct internet access would leave the site straight to the application with no overlay and no security gateway. The guests have both. Exam caveat: the guest data policy still has to steer them into the SIG. The model names the design. A missing policy can leave them on uninspected internet without changing what the design was supposed to be. Operational check: a guest session should hit the SIG over the internet color, and a staff session should stay on the MPLS handoff.