Software-Defined Access (SD-Access)

Hello im still learning about SDA environment i have a question, so in our HQ we deploy SDA infrastructure with policy enforcement on firewall using SGT-IPBASE all the acl on firewall then we want to implement SDA too on our branch but there are no f...

Would anyone be able to give me a little advice on my options for assigning IP Pools to clients. This seems to be my sticking point with SDA.We have a brownfield migration (collapsed cores, L2 to edge, VLANs spread across access hubs and we must reta...

Hello Gents i have no ways to check is subject possible or not (SW 2.3.5). Also how do we bypass IP-pool allocation in case of adding new VLAN? Can anybody please assist? thanks in advance

Hi, In our SDA fabric, we have a separate L2LISP0 interface on each edge node for each VLAN (e.g. VLAN 1021 -> LISP0:8188). These interfaces are normally in the "up" state. In certain cases, our NMS reports that one of the L2LISP0 interfaces on a spe...

Hi colleagues, I was wondering whether anyone has come across the following situation, related to migration of a standard LAN to SDA. In the traditional LAN (typical 2-tier with L3 on the core and L2 downstream on the access) there could be multiple ...

Hi CSC,Is it possible to have just a layer 2 transit VLAN without allocating addressing etc.. Scenario would be for example having an ISP WAN Link plugged into a port (say VLAN x) and then my FW Outside Port plugged into a port (VLAN X) to allow tran...

HiWe are doing an SDA install and require to do a L2 transit to the legacy network in order to migrate some vlans into the fabric from the legacy network.  I have managed to create a L2 transit and hand off the required vlans but this is on a single ...

Hello, I'm looking for your support on the  Cisco Application Centric Infrastructure (ACI) infrastructure and HPE solutions. whether it's possible to use the HPE Synergy 12000 and  HPE SN6620C SAN switches in the ACI infrastructure. If yes, please sh...

Hi CSC, If I run a stack of 9300s with roles, CN, BN and EN, essentially FIAB. I want to hang a couple of 3560CX as Extended Nodes. During plug and play and onboarding does DNAC configure these extended nodes with LISP for example or do they act like...

What is the best strategy or a best practice to migrate a traditional network to SDA keeping the actual core (Catalyst 9500 stack) as CP+Border node? I must maintain the 9500 switch running as configure SDA fabric on it. The access switches will be r...

I have 2 scenarios:Scenario 1: Global/USA/SF/BLD_SF has 1 FIAB device -> add BLD_SF as FZ Scenario 2: Global/USA/SF/BLD_SF has 1 FIAB device -> Add FLOOR1 as FZ BLD_SF is building and SF is a Fabric site unique FIAB device is provisioned and assi...

I heard that Cisco does not recommend to deploy ISE and DNAC to a distant location from the SDA Fabric. Is this a correct statement?(I cannot have ISE and DNAC on a DataCenter , and SDA-Fabric in a nother location)?

HI All,I've been using DNA Center for a few days and I'm not sure if I've encountered a bug or not. When I to change the device role of a switch from "Access" to "Core/Distribution" in the Inventory section, the software shows as "compliant". However...

HiCan anyone share their experiences of a large SD Access deployment and how they allocated IP pools?  I've read that since there are no broadcasts to propagate, except where a certain functionality needs L2 flooding, then it can be common to use lar...

Hi All, I have an SDA fabric using closed mode authentication and looking to setup a fabric site wide voice VLAN. I created a voice IP pool in the fabric and noticed that its not set as the default voice VLAN on my fabric edge ports (the default voic...