Showing results for 
Search instead for 
Did you mean: 

Guide to choosing SD-Access (SDA) Border roles in Cisco DNAC 1.3


Borders are the entry and exit point for the Fabric, there are different types based on what type of network domain they are connecting to.  Cisco DNA Center allows you to configure Border options in Provision > Fabric. 


In Cisco DNAC 1.2, there were following Border options to be configured for SD-Access fabric:

  • Internal Border (a Border that connects to known IP prefixes/ Rest of Company)
  • External Border (a Border that connects to unknown prefixes/Outside World)
  • Internal + External Border (a Border that connects to unknown and known prefixes/Anywhere).  

Screen Shot 2019-07-12 at 3.05.36 PM.png


In Cisco DNAC 1.3, there is only one "Border Node" selection. Within the "Border Node" configuration, different selections have to be made to make the border: Internal only, External only, or Internal+External. 


Screen Shot 2019-07-12 at 12.09.00 PM.png


To configure border as an Internal only, External only or Internal+External do the following:

  • Initially without any configuration, a border is an "Internal" border.
  • To configure Border as "External" border, check "Default to all Virtual Networks" and "Do not import external routes"
  • To configure Border as "Internal + External" border, check "Default to all Virtual Networks" and uncheck "Do not import external routes".
  • "Connected to internet" option is only applicable in the case of "SD-Access Transit"

Screen Shot 2019-07-12 at 12.09.15 PM.png


The mapping between old options and the new is as below:

Screen Shot 2019-07-12 at 12.47.26 PM.png

For more information, please refer to this Cisco Live session, "Cisco SD-Access - Connecting to the Data Center, Firewall, WAN and More ! - BRKCRS-2821" 


Also, for more information about Borders and Transits refer to following articles: 

CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards