DNA Center 2nd Generation Appliance

[Ravs]

Hi Guys

We have the DNA 2nd Generation Appliance. The documentation states that we need to configure at a minimum Enterprise Port and the Cluster Port. Each of the Ports also requires the Virtual IP addresses. The Enterprise and Cluster Interface IPs needs to be UP as well.

Please if someone can explain this, if we can use the following ranges on the Cluster and Enterprise Ports.

1. Enterprise Port - 

IP Address - 10.0.0.1

Subnet mask - 255.255.255.0

Default Gateway - 10.0.0.254

Virtual IP Address - 10.0.0.253

2. Cluster Port

IP Address - 10.0.1.1 

Subnet Mask - 255.255.255.0

Default Gateway - 10.0.1.254

Virtual IP Address - 10.0.1.253

Static Route - 10.0.1.0/255.255.255.0/10.0.1.254

Please let us know of any queries.

Regards

[Dan Rowe]

Hey Ravs,

Here are a few comments:
-- You can only configure one default gateway since all network interfaces share the same routing table in DNA center. You are not allowed to configure a default gateway on the Enterprise port AND Cluster port.
-- I would suggest keeping the default gateway configured on your enterprise port
-- You should not need to configure static routes, default GW, or DNS servers on the cluster port (IP address and mask only will suffice.
-- If possible, I would use a different private subnet on the cluster port than you use on the enterprise port such as 172.x.x.x or 192.168.x.x.
-- With the DN2 model appliance, make sure to configure the the ports on the directly connected switch where the enterprise and cluster ports plug into as access switchports

[grabonlee]

Hi Ravs,

1. Only one interface can have the default gateway and it should be configured on the Enterprise port.

2. DNS Servers can also go on the Enterprise port

3. Cluster Port only needs an IP address and I would suggest using a private range not in your 10 block. For example 172.16 or 192.168

4. There is the Management port, and if you plan to use it, configure the static route here and this should point to your management subnet where you know you don't have Enterprise devices to be managed by DNA. You can then access the DNA GUI through the Management Port. If you don't use the MGT port, then the Enterprise port IP address would be used.