We are having an issue with upgrading devices on external subnets outside our internal network.
We have been able to manage the devices via SSH and SNMP via the external address of the switch, although when using SCP to upgrade the IOS via DNA/Catalyst Centre, the switch is interpreting it is as coming from the internal address of our DNA appliance rather than the external NAT address it uses outbound for SSH and SNMP management. I have confirmed this via debugging on the switch, although when we have done this in the past with Cisco Prime it has worked going out via the same NAT address.
Is this some sort of additional inbound traffic that DNA-C does as part of the image upgrade process, that did not use to exist in Cisco Prime?
