Loopback registration in LISPHi All,I have fabric campus configured with only problem policy enforcement in inter-VN traffic. This is not working because traffic goes out of VXLAN and SGTs are lost. I want to configure my Edge switches so that they w...
Hi!We have deployed a stacked 9500 as our layer 2 border node, configured with lan-automation and have an issue with migrating wired clients.We have a solution where clients authenticate with MAB over ISE and can migrate their wired connection to oth...
Guysnoticed "amber" output on one of FIABs. Any idea on how to drill down to root cause on that single "MAC registration inconsistency" pls? FIAB1#show lisp site summary----------- IPv4 ----------- ----------- IPv6 ----------- ----------- MAC -------...
Since I am new to SDAccess fabric world just putting up a weird question. Is there by any means we can run a SDA fabric in a layer 2 setup (by configuring the different IP pool subnet's gateway in a L3 switch or firewall outside the fabric).
How to migrate from 2 nodes co-located CP/BN on an SDA site to 2 dedicated CPs and 2 dedicated BNs? For instance, following the SDA CVD if I start with a small site model for a given site/fabric with CP/BN co-located, how can I later migrate to a med...
Hello,I'm going to do my best to describe this so bear with me. We have an existing SDA campus deployment... roughly 6 large "facilities" as independent fabrics that connect to a central site via IP Transit (BGP). That central site is the distributio...
Hi, We are about to implement sd-access, does anyone have a guide to configuring fiab and how it should be incorporated into the sd wan solution...Thanks in advance Ciro Gustavo Mele
i'm predicting topic is for "make a whish" or "road-map" but just in case i'm mistaking...Scenario: multi-site SDA deployment with single VN in incomplete state by design bc customer is not yet ready to supply VN appropriately. Side effect: regularly...
Hi,what exactly is the purpose of command from the subject?I have noticed that without it I cannot ping from LISP to non-LISP site. I have one border/control node with L3 handoff, and LISP redistribution into BGP. However, when I omitt the command fr...
Hi,In SDA, what is the reason of redistributing BGP routes to LISP at border/control node?I mean, with Proxy-xTR, every edge node will forward packet to it if it receives negative map reply from MS/MR. Then, Proxy-xTR will perform another check with ...
I have a client that would like to migrate to SD-Access. Their currently LAN is mostly older 4K's that are slowly being replaced with 9300's and 9400's. Currently, they don't have consistent LAN segmentation across all sites (some sites are flat, som...
Hi All, It seems a common scenario to me where a router is connected to the campus LAN behind which a few subnets are located (e.g. a staging environment). Would it in an SDA Fabric be possible (and supported) to connect this router on a fabric edge...
HiWe ahve a Certain VN in SDA and I am wondering if its possible to apply segmentation within the VN itself,? I wan to connect some door controllers to this VN but dont want the controllers to be able to talk to any other hosts within this VN,I just ...
Hi!I was wondering what the recommended approach is for implementing IP-SGT SXP connections to ISE for every VRF from multiple border nodes.In guides the DNA Center created network loopback address is used with a single border node. In environments w...
Dear community we are running a Cisco DNA-C v1.3.1 and as far as I understand the data sheet for this version, it should support multiple, different Cisco ISE clusters: https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/dna-ce...
