Isolated Network in ISE and DNAC

[ShareefKooliyodan0444]

Hello 

how we can  to create isolate LAN or network access for few computers in ISE and DNAC environment. 

Cisco DNAC center is managing Trustsec security group . 

any documents or something to get help .. Guyzzzzzzz please help. 

[DanielP211]

Hello!

Do you have SDA configured? In that case create a new pool/VN and limit using SGT/SGACL. Read more regarding micro/macro segmentation in this blog.

https://www.theasciiconstruct.com/post/sda_security_1/

BR

[jedolphi]

There is also "Layer 2 Virtual Network" in SD-Access 2.3.5 and later. The L2VN is like one big VLAN with no default gateway inside the SD-Access Fabric.