DNAC ip addresses

[dijix1990]

I configured DNAC with three interfaces:

Management - eno1 - 192.168.100.2/24 with VIP 192.168.100.1 - it's out of band network in my company

Enterprises - enp94s0f0 - 192.168.150.2/24 with VIP 192.168.150.1

Cluster - enp94s0f1 - 192.168.20.2/24 with VIP 192.168.20.1

I have 2 questions:

1. It's normal that DNAC goes to my devices in pool 192.168.100.0/24 via Management interface?

2. I thought that DNAC will go to devices via VIP addresses but it goes via non vip addresses because I added addresses 192.168.100.1 and 192.168.150.1 to my ACL and it isn't work until I add physical addresses 192.168.100.2 and 192.168.150.2

[PabMar]

Hi,

DNAC interfaces work kinda like a router. It will get to the destination subnet over the interface that has a route to it.

If you've put a default route over the MGMT interface and there's no more specific static routes on the enterprise port, then it will go via the mgmt port.

Hope that helps.

Regards.

[dijix1990]

Ok, and what about VIP address? Why DNAC doesn't use VIP for cli and snmp access?