topic Re: Configure fabric edge interfaces using a DNAC Template in Software-Defined Access (SD-Access)

Configure fabric edge interfaces using a DNAC Template

c.walsh — Thu, 01 Jul 2021 12:38:18 GMT

Hi, attempting to apply/update interface configuration on a fabric edge switch stack using a Day-N template via DNAC.

DNAC version = 1.3.3.9

Fabric edge = Catalyst 9300 version 16.12.4

Configured the template to reconfigure an interface & it passes the simulation under the template editor.

Edited the network profile for the site adding the Day-N template to the profile.

Re provision the device, highlight the switch & enter the interface & deploy.

Get the Success message, stating device provisioned successfully.

However, looking at the CLI, the interface config has not changed/been updated.

Can someone advise what i missing or doing wrong?

TIA

Colin

Re: Configure fabric edge interfaces using a DNAC Template

c.walsh — Tue, 06 Jul 2021 07:52:57 GMT

Updated the build config template to include the command to default the interface & then apply the config for dot1x...

interface range $INTERFACES_RANGE
description *** AV with Dot1x/MAB ***
switchport mode access
device-tracking attach-policy IPDT_MAX_10
dot1x timeout tx-period 7
dot1x max-reauth-req 3
source template DefaultWiredDot1xOpenAuth
spanning-tree portfast

This does apply the config to the required interfaces, but under provisioning / fabric/ host onboarding, the config has not updated & is showing the previous vlans applied to the interface. Which results in an error being reported for the vlan not assigned to the interface.

Has anyone had this same issue?

Re: Configure fabric edge interfaces using a DNAC Template

jalejand — Wed, 07 Jul 2021 07:49:45 GMT

You mean that you are configuring the interfaces with a template and expect host onboarding to "learn" the change? That will not happen. The final configuration looks like the default OpenAuth configuration for an Edge port on DNAC, why would you need to deploy a template for it?

If you need to automate host-onboarding, It would be better to use the DNAC API if you want host onboarding to have such information.

Re: Configure fabric edge interfaces using a DNAC Template

c.walsh — Wed, 07 Jul 2021 10:06:02 GMT

Hi,

What we are trying to do, is to deploy 802.1x/MAB on the interfaces, we are using the openauth template to point to ISE for the actions.

The interfaces were originally configured using host onboarding, so if i manually clear the port config using host onboarding & then deploy the config it works. So are we doing this the wrong way & if so, how should we be deploying dot1x?