ISE starting from something like 2.2 is known supporting multiple TrustSec policies matrices, when with the same SGT-set admin may vary with policies per NAD. In SDA, you usually have DNAC as orchestrator of TrustSec matrix with ISE reproducing only...
-
-
-
-
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community
-
Forum Posts
Good dayI need guidance on how to configure multiple Multicast instances on Cisco Catalyst Center for different services, is there a guide on this?
We are running wired & wireless SDA at one of our facilities. Seems to work fairly well. In the last couple of months, we've been encountering some weird wireless connectivity issues. At completely random times, wireless appears to drop in random are...
Hi, I am trying to deploy a Guest SSID on an SD-Access Fabric-in-a-box (9300LM with embedded WLC) operating in mixed mode. The Guest SSID will in non-Fabric mode anchored to another 9800-L-F-K9 anchor WLC in the DMZ. I have created and added the ...
Hi team!This is currently only a design question — there is no active deployment at the moment.The topology consists of a Border Node (Catalyst 9500) connected to a Nexus pair acting as Fusion routers. The Nexus pair is operating with vPC.From my und...
I am removing a single switch from a LAN Automated stack of 3x switches but one of the fibre links is in the switch im trying to recover.I have been through the "delete link" process quite a few times so I am familar with it (aswell as the "add link"...
Hi Experts,I have started working on SD Access recently. Just curious about the failover mechanism here.I am sharing the design scenario which is standard for most of the designs. We have SD WAN for WAN connectivity and SD WAN is managed by another v...
Hi,Is it true that in SD-Access, the VNs capacity of the fabric is determined by the least switch VNs capacity?So if I have 9300 switches and 9200 switches, the VNs capacity per switch in the fabric will be 4 VNs only per switch?I couldn't find it me...
Hi all,i have a small SD-Access Deployment with 4 fabric sites, one of them is a very small site deployed with FiaB, all the Transit are configured as "IP-based".In every fabric site (except the "FiaB" one) i have two Border Nodes where i configured ...
I am experiencing a persistent one-way audio and unregistration issue with a specific Cisco 88xx IP Phone (Extension 1374) after a hardware replacement in an SDA (Software-Defined Access) environment.Despite the phone being replaced with a new unit, ...
Hello all,My organization was testing Bitlocker Network Unlock in our SDA environment and was running into issues. I was curious if anyone else has setup network unlock in their SDA environment. I'm pretty sure the reason we are having issues is beca...
In the SDA design, the Edge node and Intermediate node are connected to the Border node.We intend to move the Edge node uplink to the Intermediate node.One method involves deleting the Edge node from the DNAC Inventory menu, resetting it, connecting ...
Resolved! Trustsec Enforcement
Hello all:Looking for some assistance with trustsec enforcement within a Cisco SDA fabric, and the best place for policy enforcement for devices external to my SDA fabric.I have configured Group Based access control setup in catalyst center. Trustse...
Resolved! PXE boot on SDA not working
Hi AllI m working on setting up PXE boot for SCCM device builds over the network . We are using an SDA network where I have configured IP helper on the SVI the endpoints are connected to . This is the configuration on the Fabric Edge node SDA-EDGE-...
Hi Experts,I am new to SD-Access solution. Is it a good practice to have stack of Border Node for a small site?I came across a post stating -it is not good to have BN stacked as you lose hitless SWIM for site (assuming u have single pair of BN & FN t...
