Software-Defined Access (SD-Access)

Hello, Is there a means to deny traffic between endpoints belonging to the same Scalable Group?  This for the obvious reason to prevent lateral movement between SG members.  I am looking for the lookalike of ACI's 'Intra EPG isolation'.  

Hi guys,The Edge devices in SDA had only one fabric uplink due some reasons.So now I have to deploy additional more link to protect against physical link failure.But I consider the method, manually configure connected IP and IS-IS or re-provisioning ...

We are looking at integrating our WLC into DNA and just making sure we have all the information before we progress with the process. Are you still able to manage the WLC manually after it has been provisioned by DNA or is DNA the only way to manage a...

Hi FolksHope can someone help me understanding and demistying Fabric routing table VRF routing table shows only connected devices and routes for other IP pools in same VRF and other hand Global routing table maintain default and RLOC routes learned L...

Does anyone have a good process for replacing a failed Fabric switch that was originally configured via LAN Automation? I have DNAC 2.2.2.6 but the RMA workflow is not supported for LAN Automated devices, and I can't find any good information.  Thank...

I have two Fabric connected WLCs (embedded on same switches that resilient Border/Control planes are running) All APs are currently configured as Primary WLC Switch 1 and Secondary WLC Switch 2 I assume for complete resliency I will also need to add ...

Hello,I'm having trouble wrapping my head around a weird issue. I have two borders and one single fusion switch and they only have B1F1 and B2F1 connections. I have imported a route on the Fusion router so that I can leak into the fabric but the bord...

Hi Guys,Some of the advanced configurations is missing in templates when deploying a device. Template data that has been put in before when fabric originally provisioned a few years back but it's missing for random switches.This is problematic becaus...

Group-Based Access Control navigate to Analytics is not show me anythingI create SGT and i do same policy, integrate with ISE and Stealwatch host groups is success butin the Policy ---> Group-Based Access Control ---> Analytics not visualize my netwo...

Hello, I'm seeing odd issue in assurance alerting on some VN DHCP/DNS is not reachable. They are not reachable via ICMP so connectivity check is failing however the issue is it's trying to reach out to what is set in Network settings for the site (th...

Hi guys a quick question about sd access.I believe you normally keep the ip you have been assigned across campus? Is this correct?how is this achieved on the port? Do you start off in somesort of quarantine vlan and then once authenticated, ise moves...