topic Features DNA CENTER vs Features Cisco LAN MANAGEMENT SOLUTION in Cisco Catalyst Center

Features DNA CENTER vs Features Cisco LAN MANAGEMENT SOLUTION

lisandro — Wed, 25 Aug 2021 16:02:45 GMT

Dear very good morning,

We currently have a Cisco LMS running, but we are going to discontinue it and start using DNA CENTER.

My question is the following:

In the LMS we use a feature that is in Configuration> Compliance> Baseline Compliance> Compliance Check

In that place we have several templates configured for routers, switches, hubs, etc.

We use those templates to compare the current configurations of the equipment with those of the templates so that everyone has the necessary configurations and what we need.

When we do this compliance check, we generate a report with the teams that do not comply with the requirement so we can correct it.

I would like to know if the DNA center does the same.

Thank you so much

Re: Features DNA CENTER vs Features Cisco LAN MANAGEMENT SOLUTION

Mike.Cifelli — Wed, 25 Aug 2021 17:04:29 GMT

You can schedule or manually trigger compliance audits within DNAC on your inventory. This link will identify DNAC compliance in depth: Cisco DNA Center User Guide, Release 2.1.2 - Compliance Audit for Network Devices [Cisco DNA Center] - Cisco

HTH!

Re: Features DNA CENTER vs Features Cisco LAN MANAGEMENT SOLUTION

Preston Chilcote — Wed, 25 Aug 2021 17:10:30 GMT

Not in exactly that way. The automation (a.k.a provision) features of Cisco DNA are designed to help you use a configuration template to do the configuration of the network devices in the first place. That should mean that all the devices are using a standardized configuration and prevent these types of missing configurations from ever showing up (especially if you restrict your ops team from making their own config changes via cli). But, if someone does manage to change the config on a network device without using Cisco DNA (which does not lock out other users), the configuration compliance check (as of today) can flag it if there is a difference between startup and running configuration. There is also a place where you can see the config drift for a particular network device over time. There isn't currently a report available that shows either of these.

In short, you may be able to save a lot of time if you use templates to provision the devices. With a few clicks you can configure as many devices as you want to a standardized configuration and not have to worry about running any reports at all.