Hello all,We are running DNAC 2.3.5.5-70026. We have a subnet pool (vlan) dedicated to card readers which are silent hosts. In order to overcome problems related to silent hosts, we decided to enable ip-directed broadcast (and L2 flooding) for the sp...
Hi Folks,Just wondering if this is possible. I look at DNAC and in the fabric site SSIDs i have to assign an IP pool. If I wanted an SSID VLAN to be deterministic of a dynamic VLAN from ISE is this not possible?ThanksJ
Hi All,I'm currently working on another SDA design that will comprise of roughly 25 fabric sites with a total of 1k fabric edge nodes. All sites are connected togther using a Metro-E service in a hub and spoke topology with the main campus site being...
Hi Guys, I know that in the SDA, the latency of each SDA components is very tight. When designing an SDA, how can we know if we can meet the RTT? For example, from my Edge switch to my DNAC or AP to my WLC and WLC to my DNAC, how do we know if RTT is...
Hello!I have used this guide to configure our SBEN https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/2-3-5/user_guide/b_cisco_dna_center_ug_2_3_5/b_cisco_dna_center_ug_2_3_5_chapter_01110.html...
HiI'm testing Trustsec in my SD Access lab. I can assign 2 ports on edge switches to different groups then apply a policy that blocks pings and it works fine. I'm not authenticating the users so I statically assign an SGT via DNAC when I assign the...
Dears, We are running 2 ISE VMs in one ESXI Server and we are looking to migrate both of them one by one to two UCS Servers running under micorosft windows server standard 2022, The ISE is integrated with Firepower and DNAC , we are looking for way t...
HiMy understanding was when I create an Anycast gateway in SDA it is pushed out to the edges as an SVI for the clients on the Edge to use. I also understood that on the Border/CP the same IP address was pushed out but this time as a loopback address...
We are running ISE1 standalone.We are currently rebooting ISE1 due to an issue.We have ISE2 ready, which is a clone of ISE1 (UCS is different). I will disconnect the uplink of ISE1 connected to FUSION and connect the ISE2 cable.Once ISE1 has finished...
SD-Access looks great and all, but I'd love to hear from people who have fully deployed SDA for a fairly large campus. Anyone willing to talk about the good and bad, the pretty and the ugly? Specifically, any cities or airports with SDA fully deploye...
I have a Campsu network that is working on SD-Access but the wireless solution will not be Cisco WLC it will be Huawei WLC so I need a guide on how the design and the required configurations on the sd-access part I think it will be a traditional way ...
HelloSW 2.3.7.6 (but i believe topic is relevant to any code). Few more details to Subject:1) u want to filter templates ever applied to devices within arbitrary site & u use this filtering tool in the navigation pane2) u see list of templates & rele...
HiWhen migrating from from legacy switches to SDA Edges I need to transfer the port descriptions. I usually assign a large range of ports to an address pool but that would only allow me to assign one description across all those ports in the range. ...
Hello, I have a few questions in regard to SDA Border node redundancy.1. Is it recommended to run ISIS between two redundant border nodes ? I see some documentation that shows the nodes connected, but not much is mentioned in regard to what underlay ...
What should be the basic configuration for a Cat9k port that connects to a 9120AX AP configured for flex mode and inline SGT tagging?Regards
