topic Re: Limit the number of DNA center for access to network devices in Cisco Catalyst Center

Limit the number of DNA center for access to network devices

Munther — Wed, 08 Jun 2022 07:18:16 GMT

Hi Dears,

we added some switches to our DNA center, after that we notice the DNA login to switches many time at a day. this process effect on our ISE system. therefore is there any method to limit the number of DNA center to login to switches even Resync Interval is configure to 1440 minutes

Re: Limit the number of DNA center for access to network devices

Mark Elsen — Wed, 08 Jun 2022 08:13:45 GMT

- Ref : https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/hardening_guide/b_dnac_security_best_practices_guide.html#id_108831 , I acknowledge that this is kind of the reverse , but perhaps it could slow down DNA login-activity too.

Re: Limit the number of DNA center for access to network devices

Munther — Wed, 08 Jun 2022 09:30:08 GMT

Dear @Mark Elsen

Thanks for your reply, if i don't find any method i will try this may be it can limit the DNA.

Re: Limit the number of DNA center for access to network devices

Flavio Miranda — Wed, 08 Jun 2022 09:34:11 GMT

If you are OK with the Resync interval of 1440, you can change the "Update Polling Interval. ".

"In the Polling Time field, enter the time interval (in minutes) between successive polling cycles. Valid values are from 25 to 1440 minutes (24 hours). "

Re: Limit the number of DNA center for access to network devices

Munther — Wed, 08 Jun 2022 17:43:24 GMT

@Flavio Miranda

i already set the Network Resync Interval to 1440 min. in DNA version 2.2.3 and above You can update the polling interval at the global level for all devices by choosing System > Settings > Network Resync Interval. Or, you can update the polling interval at the device level for a specific device by choosing Device Inventory. When you set the polling interval using the Network Resync Interval, that value takes precedence over the Device Inventory polling interval value.

Re: Limit the number of DNA center for access to network devices

danibqb01 — Thu, 28 Sep 2023 20:15:23 GMT

We are facing the same problem.

There are several accesses via SSH from the DNA on the Switches in less than 1 minute and each access generates logs in the ISE.

We have Tacacs configured on the Switches and we can see authorization logs for commands such as "show logging" and others.

Is these multiple hits in less than 1 minute normal?

Re: Limit the number of DNA center for access to network devices

Preston Chilcote — Thu, 28 Sep 2023 20:26:53 GMT

@danibqb01 Your Cisco DNA is probably responding to an SNMP trap to collect more information about a potential issue. Best way to stop the logins is to figure out what the switch is complaining about. Check for reported Issues in Cisco DNA Assurance for that specific switch and fix the root cause there.

Re: Limit the number of DNA center for access to network devices

danibqb01 — Thu, 28 Sep 2023 21:18:27 GMT

@Preston Chilcote Perfect, I'll check and let you know! Thanks.

Re: Limit the number of DNA center for access to network devices

EPRI — Mon, 26 Feb 2024 21:04:56 GMT

Hello danibqb01
Did you ever find a solution to the constant logging in from DNA?
We are experiencing same issue on latest version of DNA. We have double checked our switches and all look normal.

Thanks