Since I am new to SDAccess fabric world just putting up a weird question. Is there by any means we can run a SDA fabric in a layer 2 setup (by configuring the different IP pool subnet's gateway in a L3 switch or firewall outside the fabric).
-
-
-
-
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community
-
Forum Posts
How to migrate from 2 nodes co-located CP/BN on an SDA site to 2 dedicated CPs and 2 dedicated BNs? For instance, following the SDA CVD if I start with a small site model for a given site/fabric with CP/BN co-located, how can I later migrate to a med...
Hello,I'm going to do my best to describe this so bear with me. We have an existing SDA campus deployment... roughly 6 large "facilities" as independent fabrics that connect to a central site via IP Transit (BGP). That central site is the distributio...
Hi, We are about to implement sd-access, does anyone have a guide to configuring fiab and how it should be incorporated into the sd wan solution...Thanks in advance Ciro Gustavo Mele
i'm predicting topic is for "make a whish" or "road-map" but just in case i'm mistaking...Scenario: multi-site SDA deployment with single VN in incomplete state by design bc customer is not yet ready to supply VN appropriately. Side effect: regularly...
Hi,what exactly is the purpose of command from the subject?I have noticed that without it I cannot ping from LISP to non-LISP site. I have one border/control node with L3 handoff, and LISP redistribution into BGP. However, when I omitt the command fr...
Resolved! Redistribution from BGP to LISP
Hi,In SDA, what is the reason of redistributing BGP routes to LISP at border/control node?I mean, with Proxy-xTR, every edge node will forward packet to it if it receives negative map reply from MS/MR. Then, Proxy-xTR will perform another check with ...
I have a client that would like to migrate to SD-Access. Their currently LAN is mostly older 4K's that are slowly being replaced with 9300's and 9400's. Currently, they don't have consistent LAN segmentation across all sites (some sites are flat, som...
Hi All, It seems a common scenario to me where a router is connected to the campus LAN behind which a few subnets are located (e.g. a staging environment). Would it in an SDA Fabric be possible (and supported) to connect this router on a fabric edge...
Resolved! VN Segmentation in SD Access
HiWe ahve a Certain VN in SDA and I am wondering if its possible to apply segmentation within the VN itself,? I wan to connect some door controllers to this VN but dont want the controllers to be able to talk to any other hosts within this VN,I just ...
Hi!I was wondering what the recommended approach is for implementing IP-SGT SXP connections to ISE for every VRF from multiple border nodes.In guides the DNA Center created network loopback address is used with a single border node. In environments w...
Resolved! Multiple ISE clusters in Cisco DNA-C
Dear community we are running a Cisco DNA-C v1.3.1 and as far as I understand the data sheet for this version, it should support multiple, different Cisco ISE clusters: https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/dna-ce...
Resolved! Fabric Border Redundancy in SDA
Hello,We have never deployed SDA, I am just wondering how the redundancy work between two Fabric Border nodes in SDA and they are physically distributed in different location within a building. Is it VSS or HSRP ? How the endpoints fail over to secon...
Hello, We have a little site with SD-Access, Catalyst 9300 as Fabric on a Box with embedded WLC, one AP attached. When an upgrade is triggered from DNAC, pre-checks fail because AP Rolling Upgrade is enabled, but I can't find a way to disable It....
I just deployed a DNAC appliance. The box came preloaded with the software. On the CIMC, I was able to IP the Mgmt and the Enterprise interface. I am able to pint the Mgmt interface from my PC.Issues: I am unable to SSH to the mgmt IP and I am also u...
