You can provision the Cisco ThousandEyes Enterprise agent in a service VPN for more visibility into the performance of the Cisco Catalyst SD-WAN overlay and underlay networks.

Prerequisites

• Ensure that the appropriate DNS and NAT configuration exists to enable the Cisco ThousandEyes Enterprise agent to discover and connect to the Cisco ThousandEyes application.

• Upload Cisco ThousandEyes Enterprise agent software to Cisco SD-WAN Manager.

  Note	If you have uploaded more than one version of the Cisco ThousandEyes Enterprise agent software to the Cisco SD-WAN Manager software repository, while provisioning the agent, Cisco SD-WAN Manager installs and activates the latest version of the agent software.

Procedure

1. Create feature template for the Cisco ThousandEyes Enterprise agent:

   1. From the Cisco SD-WAN Manager menu, choose Configuration > Templates.

   2. Click Feature Templates, and click Add Template to select an appropriate device model.

      Note	In Cisco vManage Release 20.7.x and earlier releases, Feature Templates is titled as Feature.

   3. Choose the supported devices to which you want to apply this template.

   4. In the Other Templates section, click ThousandEyes Agent.

   5. Template Name: Enter a name for the template. Ensure that the template name is unique.

   6. Description: Enter a description for the template.

   7. In the BASIC CONFIGURATION section, configure the following:

      Account Group Token	Enter the Cisco ThousandEyes Account Group Token.
      VPN	Set the VPN configuration as a Global or a Device Specific setting. Enter the ID of the service VPN in which you want to provision the Cisco ThousandEyes Enterprise agent.
      Agent IP Address	Enter an IP address for the Cisco ThousandEyes Enterprise agent. This IP Address should be unique within the fabric and should not overlap with the IP addresses of other branch agents.
      Agent Default Gateway	Enter a default gateway address. This IP address is assigned to the virtual port group of the router.

      Tip

      You can create and allocate a service subnet for the agent network. Two usable IP addresses are required to provision the Cisco ThousandEyes Enterprise agent on each Cisco IOS XE Catalyst SD-WAN device. One of the IP addresses must be assigned to the agent and second IP address to the router virtual port group.

   8. In the ADVANCED section, configure the following:

      Name Server	(Optional parameter from Cisco vManage Release 20.7.1 and Cisco IOS XE Release 17.7.1a) Enter the IP address of your preferred DNS server. This server can exist within or outside the Cisco Catalyst SD-WAN fabric but must be reachable from the service VPN.
      Hostname	(Optional) Enter the hostname that the agent must use when registering with the Cisco ThousandEyes portal. By default, the agent uses the Cisco IOS XE Catalyst SD-WAN device's hostname.
      Web Proxy Type	(Optional) If the Cisco ThousandEyes Enterprise agent must use proxy server for external access, choose one of the following as proxy type: Static PAC Static proxy settings: Proxy Host: Set the configuration as a Global setting and enter the hostname of the proxy server. Proxy Port: Set the configuration as a Global setting and enter the port number of the proxy server. PAC settings: PAC URL: Set the configuration as a Global setting and enter the URL of the proxy auto-configuration (PAC) file.

   9. Click Save.

2. Attach the ThousandEyes Agent feature template to device template:

   1. From the Cisco SD-WAN Manager menu, choose Configuration > Templates.

   2. Click Device Templates.

      Note	In Cisco vManage Release 20.7.x and earlier releases, Device Templates is titled as Device

   3. Find the device template for the target device.

   4. For this template, click …, and click Edit.

   5. Click Additional Templates.

   6. In the Additional Templates section, choose the ThousandEyes Agent feature template created earlier.

   7. Click Update.

   8. Update necessary variables, if any, and click Next.

   9. Review the configuration and click Configure Devices.

3. Repeat Step 2 for each device on which you want to deploy the Cisco ThousandEyes Enterprise agent.

The Cisco ThousandEyes Enterprise agent is deployed on the chosen devices. The agent registers with and establishes secure communication with the cloud-based Cisco ThousandEyes application to receive necessary updates and configuration. You can configure various tests and see resultant network and application telemetry data on the Cisco ThousandEyes portal.

This section provides example command sequences to provision the Cisco ThousandEyes Enterprise agent on Cisco IOS XE Catalyst SD-WAN devices using a device CLI template or an add-on CLI template.

Prerequisites

• Ensure that the appropriate DNS and NAT configuration exists to enable the Cisco ThousandEyes Enterprise agent to discover and connect to the Cisco ThousandEyes application.

• Upload Cisco ThousandEyes Enterprise agent software to Cisco SD-WAN Manager.

  Note	If you have uploaded more than one version of the Cisco ThousandEyes Enterprise agent software to the Cisco SD-WAN Managersoftware repository, while provisioning the agent, Cisco SD-WAN Manager installs and activates the latest version of the agent software.

This section provides example CLI configurations to provision the Cisco ThousandEyes Enterprise agent in a service VPN.

1. Enable IOX on the device.

   iox

2. Configure virtual port group. The virtual port group acts as the gateway for the Cisco ThousandEyes Enterprise agent.

   interface VirtualPortGroup4
    vrf forwarding 100
     ip address 192.168.61.1 255.255.255.252

3. Configure app-hosting paramters for the Cisco ThousandEyes Enterprise agent.

   app-hosting appid te
   app-vnic gateway0 virtualportgroup 4 guest-interface 0
    guest-ipaddress 192.168.61.2 netmask 255.255.255.252
   app-default-gateway 192.168.61.1 guest-interface 0
   app-resource docker
    prepend-pkg-opts
    run-opts 1 "-e TEAGENT_ACCOUNT_TOKEN=z0kemf"
    run-opts 2 "--hostname ISR4461TE"
    run-opts 3 "-e TEAGENT_PROXY_TYPE=STATIC -e TEAGENT_PROXY_LOCATION=proxy-exmaple.com:80"
   name-server0  192.168.168.183
   start

   Note

   You can use the proxy configuration only if the Cisco ThousandEyes agent does not have an Internet access without a proxy. Also, the hostname is optional and if you do not provide the hostname during the installation, the device hostname will be used as the Cisco ThousandEyes agent hostname. The device hostname will be displayed on the Cisco ThousandEyes portal. From Cisco IOS XE Release 17.7.1a, the DNS name server information is optional. If the Cisco ThousandEyes agent uses a private IP address, establish a connection to the device through NAT.