300-415 ENSDWI Lab Guide 2026: The 36 GB Problem
Three controllers, and they eat 24 GB between them before a single edge router exists. This is the CCNP exam a normal laptop cannot lab.
- 300-415Exam
- 90 minTime
- $300Fee
- 6Domains
- CML-PersonalCheapest lab
- 48 GB hostRAM needed
Table of Contents
The minimum lab
ENSDWI is where the home-lab story stops being about skill and starts being about memory. SD-WAN Manager alone asks for 16 GB and eight vCPUs; add the Controller and the Validator and you are at roughly 24 GB before a single edge router exists. Everything else in this batch runs on a laptop. This one does not, and the sooner you know that the sooner you can plan around it. Note the naming too: Cisco has renamed the family from Viptela to Catalyst, so vManage is now SD-WAN Manager, vBond is Validator and vSmart is Controller - your study material will use the old names for a while yet.
Two edges is the minimum that makes policy meaningful - one edge cannot demonstrate control policy, application-aware routing or segmentation, because there is nowhere for traffic to prefer. Give them different transport colours so you can watch TLOCs and path preference behave. The single router in the middle standing in for the internet keeps the node count down.
Where to build it
There is effectively one answer here, and the free tier is not it. The SD-WAN images are gated by entitlement and the memory requirement rules out most machines.
| Platform | Good enough? | Cost | What decides it |
|---|---|---|---|
| CML-Personal | Yes | $199/yr, 20 nodes | The practical answer. The supplemental image set carries the Catalyst SD-WAN nodes; the node count is not the constraint, the RAM is. |
| CML-Free | No | $0, 5 nodes | Unusable for this exam. Five nodes does not fit three controllers plus two edges, and the SD-WAN images are not on the free ISO. |
| EVE-NG / GNS3 | Entitlement | $0 + your own images | Historically the community route, but the SD-WAN images need a Cisco account with the right entitlement. The tool is not the blocker. |
| Cisco DevNet Sandbox | Worth checking | $0 | Free reservable environments are the sane way to touch a controller you cannot host. Availability of a Catalyst SD-WAN sandbox changes - check before you plan around it. |
| Real hardware | No | - | Pointless. The controllers are virtual by design; buying edges does not solve the controller problem. |
CML's images stay inside CML. The end-user licence revised April 2026 restricts the bundled images to use within the product, so an EVE-NG or GNS3 build needs images you are separately entitled to. That entitlement, not the software, is what most home labs actually run out of.
Images and horsepower
These are the published per-node figures. Add them up before you buy anything, because the total is the entire story of this exam.
| Component | What it is | Where it comes from |
|---|---|---|
| SD-WAN Manager (vManage) | Management plane, the GUI you configure from | 8 vCPU, 16 GB RAM - the single biggest node in this batch |
| SD-WAN Controller (vSmart) | Control plane, distributes OMP routes and policy | 2 vCPU, 4 GB RAM |
| SD-WAN Validator (vBond) | Orchestration, authenticates devices into the fabric | 2 vCPU, 4 GB RAM |
| Catalyst 8000V (cEdge) | The WAN edge routers | 2 vCPU, about 5 GB RAM each |
| IOL | One router standing in for the transport network | CML reference platform, 1 GB |
That totals roughly 36 GB of node memory, so plan on a 48 to 64 GB host. A 16 GB laptop cannot run this lab and a 32 GB one only just fails. If that is where you are, the honest move is to use a reservable sandbox for the controller work and spend your own machine's memory on the exams in this batch that fit.
The build list
Work top to bottom. Each step is a thing you build and then break on purpose, and each one is tagged with the blueprint domain it covers, so by the end you have touched the parts of the syllabus a lab can reach.
Bring the three controllers up and get certificates installedController Deployment 15%
This is the step that defeats most home labs, and it is examinable. Certificates must be generated and loaded before anything joins the fabric - there is no skipping it, and troubleshooting control-plane connectivity is an explicit sub-objective.
Onboard two edges on different transport coloursRouter Deployment 20%
Get both cEdges registered, then look at TLOCs and OMP routes until the relationship between colour, TLOC and path is obvious. Configure once from CLI and once from a feature template so you have seen both.
Write a control policy that changes the pathPolicies 20%
Make traffic prefer one transport, then fail that transport and watch it move. Control policy versus data policy is a distinction the exam leans on, so do one of each.
Segment the fabric end to endPolicies 20%
Put two VPNs into the fabric and prove they cannot reach each other, then leak deliberately. End-to-end segmentation is named in the blueprint.
Add application-aware routing and QoSSecurity and QoS 15%
Define an SLA class, steer an application by it, then degrade the link and watch the decision change. Add a QoS policy on the edge afterwards.
Drive it from the API, not the GUIManagement and Operations 10%
Pull device state over the REST API and look at how software image management is presented. It is only 10% of the paper but it is the cheapest 10% to cover.
What you can and cannot lab
Cisco publishes the domain weightings but not the number of items or the passing score, so treat the percentages as how the paper is built rather than as a target. The column that matters here is the last one.
| Domain | Weight | Labbable | Notes |
|---|---|---|---|
| Architecture | 20% | Partly | TODO |
| Controller Deployment | 15% | Partly | TODO |
| Router Deployment | 20% | Partly | TODO |
| Policies | 20% | Partly | TODO |
| Security and Quality of Service | 15% | Partly | TODO |
| Management and Operations | 10% | Partly | TODO |
The walls you will hit
This exam has more walls than any other in the batch, and they are all about entitlement and scale rather than skill.
Cannot be labbed at home
- The images are entitlement-gated. The controller images are not freely downloadable; getting them is the first real barrier, ahead of any technical one.
- Onboarding needs a licensing account. Bringing vEdge devices in additionally requires a Cisco Smart Licensing account, so the lab reaches outside itself before it works.
- Throughput is capped by licence. Encrypted throughput is limited in the virtual images, so nothing you measure about performance transfers to a real deployment.
- Config extraction does not work for SD-WAN nodes in CML. You cannot snapshot a working fabric the way you can with ordinary nodes, which makes iterating slower than it should be.
The blueprint is honest about this in its own way: Architecture is 20% of the paper and every objective in it begins with Describe. Cisco expects a large share of candidates to have read about SD-WAN rather than run it. Read that as permission to spend your lab budget where it converts, and to cover the Describe-level domains from documentation and question practice.
A lab proves you can build it. Questions prove you can pass.
The blueprint is only half the exam — the other half is answering under a clock. Start with the free question sets, then $5.99 unlocks the full 300-415 ENSDWI bank.
Free 300-415 ENSDWI practice test300-415 ENSDWI exam pageFAQ
How much RAM do I need to lab Cisco SD-WAN for 300-415?
About 36 GB of node memory for a usable six-node fabric - SD-WAN Manager alone is 16 GB, with the Controller and Validator adding 4 GB each and two Catalyst 8000V edges about 5 GB each. Plan a 48 to 64 GB host. This is the one exam in the CCNP Enterprise track that a normal laptop cannot run.
Is 300-415 still called ENSDWI?
The mnemonic is unchanged, but Cisco renamed the product family from Viptela to Catalyst, so the exam is now titled Implementing Cisco Catalyst SD-WAN Solutions and the components were renamed: vManage is SD-WAN Manager, vBond is Validator, vSmart is Controller. Current exam topics are v1.2.
Can I pass 300-415 without building a lab?
It is more feasible here than for any other concentration, because Architecture is 20% of the paper and is entirely Describe-level. But Router Deployment and Policies are another 40% between them and both are configuration domains, so a reservable sandbox is worth the effort if hosting the controllers is not.
What is the passing score for 300-415?
Cisco does not publish one, and does not publish an item count either. The exam runs 90 minutes and costs $300. Cut scores are set by statistical analysis and can change without notice.
Sources
Exam facts come from Cisco. Lab guidance is marked as official or as practitioner consensus where the two differ:
- https://learningcontent.cisco.com/documents/marketing/exam-topics/300-415-ENSDWI-v1.2.pdf
- https://www.cisco.com/site/us/en/learn/training-certifications/exams/policies.html
- https://developer.cisco.com/docs/modeling-labs/
- https://www.cisco.com/c/en/us/support/routers/sd-wan/series.html
Checked September 5, 2026. Cisco revises exam topics and changes image licensing without notice — confirm before you spend anything.