Software-Defined Access (SD-Access)

Resolved! SD-Access Design

Hello everyoneIn the SD-Access Design with Layer 3 Routed Access I noticed that the access switches are interconnected to the distribution switches but not directly to each other.So I'd like to know, since the routing decision is made directly at the...

Resolved! Non sda switch connected to the fabric edge

I would like to discuss the scenario where endpoints are connected to a standard switch which is itself connected to the fabric edge of a sda campus network (as shown on the attached picture).The clients on the non sda switch have to connect to a ser...

ExtraNet Policy and SD-Access Transit Issue

Hello everyone. We have deployed an 8000v as a transit control plane node. We, therefore, created an SDA-Transit (named IV-Transit) and successfully assigned this SDA-Transit to one of the Fabric Site without any problems. Subsequently, we created ...

Upgrade 3-node DNAC cluster from 2.2.2.8 to 2.3.5.5

I have read the upgrade process to get a DNAC 2.2.2.8 deployment upgraded to 2.3.5.5 with the intermediary step to 2.2.3.6/7 and I am OK with the steps. However there are a bunch of application updates showing for 2.2.2.8 and I can't see whether the...

Resolved! Topology link not working on DNAC

Hello, For some reason DNAC isn't showing all the topology link, even after rediscovery and resyncing every device.How can I solve this ?Version 2.3.3.5-70134, every equipement are from cisco and are recent.

Resolved! Doubts about Dot1x with failover method MAB

Dear All,I configured the port of the test switch to use Dot1x as the first authentication, and as a fallback in case the dot1x failed, to use the Mab type authentication.Everything seems to work correctly. But I have a question:If I connected a New ...

DNAC missing topology links

I have a few instances where I am not seeing the topolgy links to access points. I have tried to resync the switch as well as re provision the AP. I can see the AP via cdp. How do I go about getting the topology links back. I cannot comment if they w...

Lisp Pub/Sub and iBGP

HiI have a test SDA setup and I've selected Lisp Pub/Sub as the method. Should I expect to see iBGP between my two Borders? I don't recall configuring it but it's there. I'm also using the Extranet feature and handing off to the external network on...

Multiple macs

HiWe have a 3rd party system for Heating etc and have noticed since we migrated to SD Access that now when a edge port sees several mac addresses that they are blocked I see this on ISE, the 3rd party use somesort of hub to connect their devices the...

Resolved! Fabric Edge Node not forwarding DHCP Request to PETR/Border Node

We have a very simple SDA setup. One fabric edge node which clients connect too, and one Border/Control Plane Node that connects out to the rest of our Non-Fabric environment, specifically a N7K Fusion Router. Our DHCP server is out in the Non-Fabric...

Switch End User Interfaces CTS config with Dot1x Authentication

I'm testing trustsec in a test environment.I connected a test PC, on a port of a 4500 Sup8 switch.Initially I excluded Dot1x(TEAP) type authentication and configured a static mapping on the port using the cts manual policy static sgt command.While an...

Security Configuration Guide for Cisco Software Defined Access

Hi everyone I was wondering if there is a Security Configuration Guide for Cisco Software Defined Access in regards of device hardening in a SDA fabric environment. I found the regular security configuration guidelines for the released IOS-XE version...

Cisco ISE 3.2 Patch4 Trustsec laboratory Allowed List (Default Deny)

Dear All,I have setup a trustetsec laboratory, composed by a ISE 3.2 patch4 with Premiere license, connected to cisco 9500, that has two links one connected to a 9300 (with network-advantage license), the other link is connected to a 4500 sup8. I hav...

Resolved! How to enable N+1 in SDA with Cat 9000 Embedded Wireless Controller

Hi Team, Looking for any information relating to the configuration of N+1 in SDA with Cat 9000 Embedded Wireless Controller..?Realising it's probably just like a normal (non-SDA) N+1 config, but if anyone has done it specific to SDA, it would be good...

Resolved! SDA LACP with two EN

Hello colleagues! There is a theoretical (or not) question. We know that in the DC design if we need to use a multihoming connection from endpoints (servers or something) to two independent leaf switches - we can use vPC or multihoming ESI or call it...

Software-Defined Access (SD-Access)

Forum Posts

Resolved! SD-Access Design

Resolved! Non sda switch connected to the fabric edge

ExtraNet Policy and SD-Access Transit Issue

Upgrade 3-node DNAC cluster from 2.2.2.8 to 2.3.5.5

Resolved! Topology link not working on DNAC

Resolved! Doubts about Dot1x with failover method MAB

DNAC missing topology links

Lisp Pub/Sub and iBGP

Multiple macs

Resolved! Fabric Edge Node not forwarding DHCP Request to PETR/Border Node

Switch End User Interfaces CTS config with Dot1x Authentication

Security Configuration Guide for Cisco Software Defined Access

Cisco ISE 3.2 Patch4 Trustsec laboratory Allowed List (Default Deny)

Resolved! How to enable N+1 in SDA with Cat 9000 Embedded Wireless Controller

Resolved! SDA LACP with two EN

DNAC Installation Stuck at “Wait for Kubernetes Control plane to start

SD-Access FIB loopback0 change IP

Cisco DNA Center - unable to remove edge node from fabric site

Network Templates filtering by Site shows irrelevant templates

API Error with Ansible API on Cisco Catalyst Center

Ring of Edge nodes supported?

SD-Access , SD-WAN Transit

I'm SDA Student

How to wiped out/delete the configuration of Cedge device from vmanage

Pxgrid enable in pan or PSN or both