There are four different planes in Cisco SD-WAN solution: 

• Orchestration plane- The SD-WAN WAN Edge routers are onboarded securely into the SD-WAN overlay using this plane. The vBond controller (also known as orchestrator) is responsible for authentication and authorization of the SD-WAN components. The vBond orchestrator also doing the task of distributing the list of vSmart and vManage controller information to the WAN Edge routers. 

• Management plane- This plane is used to configure and monitor centrally. The vManage controller performs the role of the centralized network management system (CNMS) that provides a single pane of glass GUI interface for deployment, configuration, monitoring,, and troubleshooting all Cisco SD-WAN components. 

• Control plane- This is the decision-making plane for the traffic flows and is also responsible for maintaining the network topology. The vSmart controller propagates control plane information between WAN Edge devices and implements control plane policies. vSmart also makes the distribution of the data plane policies for enforcement. 

• Data plane- The packets are forwarded (using FIB) based on decisions from the control plane. WAN Edge devices provide secure data-plane connectivity between the sites in the same SD-WAN overlay network. WAN Edge devices establish secure connections for traffic forwarding, security, encryption, Quality of Service enforcement, and more.