topic Re: How to create virtual network in authorization profile when security group is checked in Network Access Control

How to create virtual network in authorization profile when security group is checked

jpyang — Fri, 10 Aug 2018 18:12:47 GMT

Hi,

Inside authorization profile in the common tasks area with Security Group checked, then selecting a security group tag, a field for 'Virtual Network' appears. Where do we create this virtual network from?

Thanks,

Jennifer

Re: How to create virtual network in authorization profile when security group is checked

paul — Fri, 10 Aug 2018 20:00:29 GMT

I am pretty sure that is all part of SDA/DNA-C/ISE integration, but I could be wrong on that.

https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Campus/CVD-Software-Defined-Access-Design-Guide-2018APR.pdf

Re: How to create virtual network in authorization profile when security group is checked

iwearing — Tue, 30 Oct 2018 10:10:08 GMT

Hi,

Did you get a resolution to this. I have this same issue and cannot specify a VN in my auth profile.

regards

Ian

Re: How to create virtual network in authorization profile when security group is checked

hslai — Tue, 30 Oct 2018 15:51:47 GMT

As paul said, this depends on DNA-C. I believe it supported in SD-Access in DNA-C 1.2.5+.

During Provisioning the fabric, we add VN with a IP pool and there we may select a Scalable Group (under Groups) with the VLAN (under Auth Policy).