topic Re: DNA Center VLAN-to-SGT automation in Software-Defined Access (SD-Access)

DNA Center VLAN-to-SGT automation

Andrii Oliinyk — Wed, 19 Apr 2023 08:28:26 GMT

Hi Gents

looking for the place in SDA manuals where process of assignment of SGT based on VLAN (VLAN-to-SGT mapping) at access-layer is described.

It said to be in the "Host onboarding" section of user guide but either i'm blind or...

Can anyone be of help? thanks in advance

Re: DNA Center VLAN-to-SGT automation

jalejand — Wed, 19 Apr 2023 09:04:11 GMT

Hi Andy

It can only be done when creating the VLAN/Fabric Pool in Host Onboarding, cannot be edited after.

Re: DNA Center VLAN-to-SGT automation

Andrii Oliinyk — Wed, 19 Apr 2023 09:19:28 GMT

could u pls refer me to corresponding point in the documentation?

thanks in advance

Re: DNA Center VLAN-to-SGT automation

jalejand — Wed, 19 Apr 2023 09:35:38 GMT

Hi Andy

By bad, in earlier versions of Cisco DNA Center (before the new Fabric configuration page), you could not edit it. Only some of the fields were editable after deploying a pool. This will be the case even in latest versions if you are editing the VLAN/Pools from the host onboarding page (classic view).

If you switch to the new interface ( the one that says "Preview New SD-Acces Beta", starting from 2.3.x.x if I'm not wrong), you can go to "Virtual Networks", "Anycast Gateways" and then Edit the pool you want to edit.

You will be able to configure the SGT for the VLAN itself from there:

Re: DNA Center VLAN-to-SGT automation

Andrii Oliinyk — Wed, 19 Apr 2023 09:48:02 GMT

Thanks a lot. Just one more Q pls just for academical interest: are we as well able to modify(customize) VLAN ID on that page?

Re: DNA Center VLAN-to-SGT automation

jalejand — Wed, 19 Apr 2023 09:57:44 GMT

Unfortunately not, the option is greyed out in the new UI (once its deployed).

In both classic and new UI, you can customize the VLAN ID and name the first time its being deployed, just not after.

Re: DNA Center VLAN-to-SGT automation

KevinR99 — Wed, 16 Oct 2024 09:25:16 GMT

If we apply an SGT to an Anycast gateway where do we see that applied in the edge config? I see my SGT in "show cts Environment-data" but I don't see the SGT applied anywhere as a static assignment to the gateway,svi or vlan. I'm trying to replicate the function of an access-group on an SVI in a traditional network. Is there any way to apply an SGT to a whole Anycast gateway's subnet then subsequently use that as an any to SGT or SGT to any type function. Much as you would do via an ACL/Access-group based on IP's?

Kev.