DNAC Command Runner

[LoganAA]

Just getting DNAC setup for our site. One of the things I have noticed is that it doesn't appear we can change switch configurations via the command runner. Just simply show commands. Is there an alternative to changing active configurations via DNAC, or is this currently in the works? 

Thank you.

[Dan Rowe]

Command runner is a tool that can be used to only run show commands on the network device. There are several workflows that allows Cisco DNA Center to push configurations to specific network devices. You can use the Day-N provisioning workflow to apply configuration that you include in a configuration template within Cisco DNA Center:

Create Template:

https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/2-2-3/user_guide/b_cisco_dna_center_ug_2_2_3/b_cisco_dna_center_ug_2_2_3_chapter_01000.html

Apply template through Day-N provisioning process:

-- https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/2-1-2/user_guide/b_cisco_dna_center_ug_2_1_2/b_cisco_dna_center_ug_2_1_1_chapter_01101.html#id_122641:~:text=and%20Play%20Provisioning-,Provis...

[LoganAA]

Thank you for the reply. I did notice the template provisioning, that is going to be a handy tool for new deployments. In the case of already deployed devices, will there be any form of SSH implemented into DNAC for devices. Currently using SolarWinds SSH ability/Putty for this but would love to have this ability as well as DNAC's other functions in one central location. 

[PabMar]

LoganAA, as already mentioned you'll have to make use of templates within DNAC to provision configurations to the devices.

Take a look as this YT video where one of our TSAs shows how to use them.

Regards,

Pablo.

[LoganAA]

Pablo, I took the time the watch the video you have linked for me. I may have not been clear on exactly what I was asking. After watching the video, I understand the "Day 0" vs "Day N" templates. I will give a scenario that may better get my question across, such as having a port disabled due to port security. In order for me to use DNAC to resolve this issue, I would need to create a template configured for "shutting" and "no shutting" this port, browse to inventory, find this device, and deploy this template selecting the interface I desire. Please correct me if I am wrong. 

I am simply wanting to know if DNAC will have the ability to let users remote into devices similar to "Command Runner" but have elevated privileges to make changes to these devices. Simply having an SSH/Telnet section for each device, where credentials can be stored on DNAC, and allow the user to manage the device through CLI rather than the template if one chooses to do so. 

[PabMar]

Hi LoganAA,

What version of DNAC are you running?

I can't pinpoint what version was this introduced at the moment. However, in my lab on DNAC 2.3.4 you can do port bounces from the DNAC GUI under the device details page. Please see the following gif.

Check on your DNAC to see if you have that option available.

Regards,

Pablo.