Hello all:Looking for some assistance with trustsec enforcement within a Cisco SDA fabric, and the best place for policy enforcement for devices external to my SDA fabric.I have configured Group Based access control setup in catalyst center. Trustse...
Hi AllI m working on setting up PXE boot for SCCM device builds over the network . We are using an SDA network where I have configured IP helper on the SVI the endpoints are connected to . This is the configuration on the Fabric Edge node SDA-EDGE-...
Hi Experts,I am new to SD-Access solution. Is it a good practice to have stack of Border Node for a small site?I came across a post stating -it is not good to have BN stacked as you lose hitless SWIM for site (assuming u have single pair of BN & FN t...
I'm trying to apply SGACLs to do micro-segmentation in SD-Access.Right now I have 2 ports with statically assigned SGTs, one is "Employees" and one is "Guests", both in the same VN (subnet).I have a Policy created in DNA-C that says SGT "Guests" to "...
Hi all,I haven't been able to find a solution to my specific issue anywhere but please correct me if this is documented somewhere!We are looking to build out a Campus SDA fabric and our design called for configuring L3 P2P /30 interfaces (no switchpo...
Morning All:We're in the process of trying to transition to IPv6 only at our organization, but are running into a few stumbling blocks for where we should be configuring NAT64 for resources that can only run, or still only have IPv4 addresses. I'm l...
I am trying to figure out on how to integrate ISE pxGrid with CER 15 to get the location of our test jabber clients. We tried to go thru snmp from CER version 15 to Access switch and jabber clients are showing unallocated. we tried to go thru CUCM to...
Hello, I have a question regarding the migration of an existing 9800 WLC within an SDA Fabric. Our current setup includes: - 2 x 9800-40 WLCs (In SSO) configured as Primary Managed AP Locations, - 1 x C9800-CL configured as Secondary Managed AP Locat...
We have SDA which includes DNAC servers plus ISE integration The license is DNA premier which includes ISE license What will happen if the DNA license expires ? Is this will affect the DNAC GUI as to manage devices, configure policies, or access anal...
Hi all, We have a 100+ sites scattered across the country and are deploying Cisco SDA for them. There are currently two data centers with existing, non-SDA anchor WLCs for Guest Wifi. Thus, the Guest/BYOD service is centralized for the sites.There a...
Hi Everyone, I'm currently in middle of a rollout of Cisco SDA across our estate incorporating Cisco DNA Center, ISE, ACI etc. Its going well :). Most of my sites are either private fiber or leased circuits which have been migrated to Cisco without a...
Hi, We are deploying SDA for a building. We have a card reader controller which is a silent host. When connnected to the switch, it will not send out any traffic. It will only send reply traffic when the facial recognition device start sending traffi...
We are working on the design for an SD Access deployment and I have a question about border node configuration.Our typical WAN connectivity is via a pair of high availability FortiGate Firewalls. These will act as the Fusion device. In a HA configura...
I'm trying to change the SSID name using catalyst center but I'm not able to do so. Upon my research, I found out that the only way is to create a new one with the new name and delete the old one. is that true? or there's another way? i mean what is ...
hello I am working on an installation of Cisco SDA I am trying to collect information on packet loss from the management interface under Assurance >Health>Client I can see a section on Application with packet loss as a heading there are no entries i...
