Guest Virtual Network in DNAC

[eric.zhang11]

Hi guys,

In DNAC, we can check a 'Guest Virtual Network' checkbox when adding a virtual network. Just wondering what kind of restrictions will be applied to end devices in guest virtual network if I check this option? For example can guest device ping each other or RDP to each other? The DNAC user guide does not much explanation about this option.

Any explanations will be highly appreciated!

Thanks,

Eric

[balaji.bandi]

Guest Virtual Network - is very restricted - they can not ping or they can do RDP with the neighbor IP, that is the advantage of SD-Access deploying in-network with ISE, Macro, and Micro segment.

Way back there was a product in the DC environment not many deployments i have seen, called VSG, Virtual security gateway in DC, the host can not talk to each other since in Hosted environment security is very important, (later they replaced in ACI with Contracts) - same here.