09-16-2021 03:23 PM
Hi.
After upgrading DNA Center to 2.1.2.7, there is a discrepancy between the access interface configuration for my switches.
After provisioning a LAN Automated switch and making it fabric enabled, I would expect the following configuration on my access interfaces:
Switch1# shwo run interface GigabitEthernet5/0/48
switchport mode access
device-tracking attach-policy IPDT_MAX_10
dot1x timeout tx-period 5
dot1x max-reauth-req 3
source template DefaultWiredDot1xClosedAuth
spanning-tree portfast
spanning-tree bpduguard enable
But lately, a lot of the switches being onboarded are missing the command spanning-tree bpduguard enable
Switch2# show run int GigabitEthernet1/0/48
switchport mode access
device-tracking attach-policy IPDT_MAX_10
dot1x timeout tx-period 5
dot1x max-reauth-req 3
source template DefaultWiredDot1xClosedAuth
spanning-tree portfast
Also, I have found that when I onboard stacked switches, the stack members are completely missing their access interface configurations. This has been an ongoing problem since DNA Center 1.3.3.5. Anyone know a workaround to this without having to manually configure the interfaces?
StackedSwitch1# show run int GigabitEthernet1/0/48
device-tracking attach-policy IPDT_MAX_10
I'm running the following versions:
DNA 2.1.2.7
ISE 2.6 Patch 7
IOS-XE 16.12.4
I primarily deploy C9300L's in a stack, and C9410R's.