Cisco DNA

[Soumitra]

give me a brief details of the prerequisitions to set up the DNA in my network of 1000 users?

[keglass]

Soumitra,

We are working on an answer to your request and will have that information to you soon.

Thank you for your patience,

Kelli Glass

Moderator for Cisco Customer Communities

[lloftin.comstor]

I also have the question on the prereq's for setting up a network with DNA.

Lance

[Gurudatt Pai]

DNA is not really an individual product but an over-arching End-End architecture that combines Virtualization, Automation and Assurance. I think what you really mean is the DNA-center which is the Automation and Assurance solution. From the network infrastructure point of view, your network switches, AP's/WLC's etc should have either of the DNA essentials or DNA advantage subscription licenses.  DNA-center 1.0 will be a Controlled Availability release this month that runs on an appliance DN1-HW-AP. This is essentially an SDN controller/Policy Orchestration engine and Assurance module within the single platform. In August, you will get Base Automation capabilities such as Network PNP, Inventory, Wireless profiles, Site Hierarchies, Image management etc with the DNA essentials licensing and Advanced Automation capabilities such as Software defined Access (SDA) with DNA Advantage. Assurance and other capabilities will be available in November with DNA-center 1.1.

[sivathot]

Checklist for DNA Center Installation

• DNA Center Appliance (DN1-HW-APL) installation as a VM or custom UCS server is not supported.

•  Review environmental requirements in Installation Guide and provision for 2 x PSUs.
•  Network Patch Requirements for each DNAC Appliance (based on best practice recommendations)

1. Appliance Management port – CIMC (recommended)
2. 10Gbit port [enp9s0] - Enterprise Network
3. 10Gbit port [enp10s0] - Intra Cluster Link
4. 1Gbit port [enp1s0f0] - Management (optional *)
5. 1Gbit port [enp1s0f1] - Cloud Update Connectivity (optional *)

•  Additional Settings for Configuration Wizard

1. DNS Server IP Address (1 required, 2+ recommended)
2. NTP Server IP Address (1 required, 2+ recommended)
3. Proxy Server IP Address (required if direct internet access is not available – http proxy only)
4. Proxy server port if required
5. Proxy server username / password if required

Note: * Required only if the Management network and/or the Cloud Update server is not reachable via the Enterprise Network.

• DNA Center Cluster

1. Cluster Virtual IP Address – Used to connect to the Enterprise Network
2. This IP Address should be taken from the Enterprise Network subnet
3. The Cluster Virtual IP must not be same as any of the node IP address (because it floats around the live nodes)
4. Cluster subnet and Service subnet address pool - /21 subnet for each
5. Used for internal cluster communications and should not conflict with any other IP in the Enterprise Network

•  For each DNA-C Appliance

1. CIMC – Management of the DNAC Appliance hardware (recommended)
2. Enterprise Network – Interface that is connected to the Enterprise network
3. All DNA appliances should be in the same subnet as the Cluster Virtual IP address (see above)
4. Intra Cluster Link – isolated network used for communication between the DNA Center cluster nodes
5. All DNA appliances should be in the same VLAN
6. Management (Required*) – (Management port IP address) used to access the DNA Center GUI
7. Cloud Update Connectivity (optional *) – used to update the DNA Center software

Note: The Intra Cluster Link IP address and the Cluster/Service subnet address pools cannot be changed after installation.

Installation Best Practices

• Always treat DNA-C as a cluster & plan for a “cluster”.

1. Standalone box is a “single node cluster”.

• Provision for separate intra-cluster link on day 1

1. Changing the intra-cluster link from one interface to another is not supported.

• Provision for Cluster Virtual IP on day 1.

1. Network Devices will continue to see the same IP when more nodes are added

• Use a complete private network for intra-cluster link (no other machines should be in this network).

• Use isolated L2 domain (all clusters must be in the same L2 domain).
• Ensure < 10ms latency (RTT) across the intra-cluster link.

Cloud Connectivity Requirements

The following URLs need to be accessible from the DNA Center for various operations

Use Case	URLs
DNA Center Update package downloads	https://*.ciscoconnectdna.com/* https://*.cloudfront.net/ https://maglev-catalog-1.s3.amazonaws.com https://maglev-catalog-staging.s3.amazonaws.com
Smart Account and SWIM Software Downloads	https://*.cisco.com/*
Rendering Geo-Maps on the DNA Center UI	https://*.tiles.mapbox.com/*
Meraki Integration	https://*.meraki.com/
IPAM Integration	URL for the IPAM-server
User feedback	https://dnacenter.uservoice.com/

Cluster Bring Up Best Practices

• Bring up first node: complete the installation (along-with Virtual IP, intra-cluster link) and let the services come up
• Bring up the second node: let the installation complete
• Bring up the third node

• Remember 2-node DNAC cluster cannot withstand a node failure (One node crash will lead to stall of the other node)
• 2-node cluster is not a supported deployment model

Pre-Requisites for Assurance

• What is required to add devices into DNAC?

Ensure the following ports are open in ACLs/Firewalls between DNAC and network devices:

Ping	Ssh	snmp poll	snmp trap	syslog	netflow	https
ICMP echo and reply	TCP/22	UDP/161	UDP/162	UDP/514	UDP/6007	TCP/443

• CLI and SNMP details are required for DNAC to discover devices:
• SSH/Telnet Login (Privileged / RW)
• SNMP v2/v3 community (RO)
• Syslog, SNMP Trap, and Netflow will be configured by DNAC in a later step (Telemetry settings) and do not need to be manually configured before adding the device into DNAC