topic Re: Host Onboarding Vlan ID Modification in Software-Defined Access (SD-Access)

Host Onboarding Vlan ID Modification

Fidel Ernesto Gonzalez Baez — Tue, 11 Feb 2020 17:59:27 GMT

Hi,

I would like to know if it is possible to modify the vlan ID assigned dynamically when host onboarding provisioning is configured.

if it is possible, i would like to know how i can do it.

Br,

Fidel Gonzalez

Re: Host Onboarding Vlan ID Modification

Mariusz Kazmierski — Tue, 11 Feb 2020 19:26:42 GMT

Hi,

If you go with dot1x/mab/easy auth on host-onboarding, then VLAN ID can be assigned based on policy configured in ISE (VLAN ID should be still the one that was originally provisioned by DNA-Center when IP Pools were first added).

Please refer to "Cisco DNA Center Fast Start Use Case: Software-Defined Access Guide" (section: Configure dynamic authentication with ISE):

https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/software-defined-access/guide-c07-741859.html#_Toc2934408

Best regards,

Mariusz

Re: Host Onboarding Vlan ID Modification

Mike.Cifelli — Wed, 12 Feb 2020 13:53:30 GMT

@Mariusz Kazmierski is definitely right with the dynamic assignment via ISE. Adding additional information:

You can utilize the DNAC template editor to modify default auth template configs. For example, using the editor you can modify the DNAC critical auth vlan that gets used in the DefaultCriticalAuthVlan service-template. You can also utilize the template editor to tweak other standard configs that get deployed from the out-of-box auth templates. HTH!

Re: Host Onboarding Vlan ID Modification

ldanny — Mon, 17 Feb 2020 08:56:55 GMT

Hi Fidel,

Please see following Guide on How to Onboard Endpoints with ISE in SD-Access.

How to SDA Host Onboarding with ISE

Re: Host Onboarding Vlan ID Modification

Fidel Ernesto Gonzalez Baez — Tue, 18 Feb 2020 14:58:10 GMT

Hi Mike,

This is really what i want, i will try to do it.

is there something specific that i need to know?

I am new in SDA.

Br,

Fidel Gonzalez

Re: Host Onboarding Vlan ID Modification

Fidel Ernesto Gonzalez Baez — Tue, 18 Feb 2020 15:12:35 GMT

Hi Mike,

Can i modify the vlan ID when the host onboarding was already configured?

I have already configured the host onboarding, the problem is that I am using Virtual machines, I have a port channel (Trunk Mode) on the edge switch, and several servers and vlans ( that was assigned before the host onboarding) on the VMWare.

I have a mismatch between the vlans configured on the VMs and the vlans assigned by the host onboarding process, I would like to modify the vlan assigned by the host onboarding process.

is it possible?