QoS Queueing, Policing, and Shaping Compared
LLQ, CBWFQ, policing, and shaping each do something different. The three primitives, when to use which, hierarchical shaping for sub-rate WAN handoffs, and the production patterns.
LLQ, CBWFQ, policing, and shaping each do something different. The three primitives, when to use which, hierarchical shaping for sub-rate WAN handoffs, and the production patterns.
Classification and marking at the trust boundary are the foundation of every QoS deployment. The patterns (untrusted access ports, conditional trust for IP phones, explicit MQC marking) and the discipline that makes them work.
The Cisco MQC three-construct model (class-map, policy-map, service-policy) covers every QoS feature on IOS, IOS XE, and IOS XR. The grammar, common actions, hierarchical policies, and verification.
DSCP is the 6-bit Layer 3 marking that drives modern QoS. The byte format, the standardized PHBs (CS, AF, EF), Cisco's DSCP-to-CoS-to-MPLS-EXP mapping, and trust boundary discipline.
SD-WAN provides encryption and segmentation but creates an inspection gap. SASE fills that gap with cloud-delivered SWG, CASB, FWaaS, ZTNA, and DLP. The 2026 vendor landscape compared.
The four SD-WAN branch deployment models compared (hybrid, internet-only, cloud on-ramp, multi-cloud), HQ patterns, and the typical 18-30 month migration from MPLS-only.
Cisco vManage (now SD-WAN Manager) is the management plane of Cisco Catalyst SD-WAN. Templates, policies, dashboards, the REST API, HA model, and the operational realities at scale.
The four-component Cisco Catalyst SD-WAN (formerly Viptela) architecture: vManage, vSmart, vBond, and WAN Edge. OMP routing protocol, cEdge vs vEdge, fabric bring-up walkthrough.
Every SD-WAN platform shares the same three-plane architecture: management, control, and data. The vendor-specific components (vManage, vSmart, FortiManager, etc.) compared.
SD-WAN and MPLS are not pure substitutes. The technical differences, cost story without the marketing spin, when MPLS still wins, and the hybrid pattern most enterprises end up with.
MP-BGP (RFC 4760) is what lets a single BGP session carry IPv6, VPNv4, EVPN, and more. The AFI/SAFI model, route distinguishers, and how modern data center fabrics use MP-BGP for everything.
Classic 802.1D STP vs 802.1w RSTP. The convergence differences (30s vs sub-second), the port state and role changes, and the one-command Cisco migration from PVST+ to Rapid PVST+.