Software-Defined Access (SD-Access)

Group-Based Access Control navigate to Analytics is not show me anythingI create SGT and i do same policy, integrate with ISE and Stealwatch host groups is success butin the Policy ---> Group-Based Access Control ---> Analytics not visualize my netwo...

Hello, I'm seeing odd issue in assurance alerting on some VN DHCP/DNS is not reachable. They are not reachable via ICMP so connectivity check is failing however the issue is it's trying to reach out to what is set in Network settings for the site (th...

Hi guys a quick question about sd access.I believe you normally keep the ip you have been assigned across campus? Is this correct?how is this achieved on the port? Do you start off in somesort of quarantine vlan and then once authenticated, ise moves...

Has anyone done or know if this type of REP Topology would be supported in SD-Access and DNA-C. I know the individual REP rings are supported when connected to the same EDGE Node. but can you stretch the VN/VLAN (Enable Broadcast) across the fabric t...

Hi guys We are suffering for provision issue of control / border node.We have 2 C9407 as control/border node, over 100 C9300 as edge node. (most of edge is not managed as well ...)This time, the problem is 1 of C9407 can't be provisioined.(it was pro...

I am working on a SD-access design and green field deployment for our client I have attached a diagram to illustrate the design.Firewall would connect outside to fabric borders which has connectivity to Internet, WAN and DMZs. In addition, those fire...

Hi Everyone! I have an exam regarding SD-access and therefor I need to speak about CISCO ISE However, my question is: What kind of Authentication method does CISCO ISE uses, when when authentication devices such laptops, servers and workstations? I c...

Hi, Struggeling with getting fabric in a box in a branch office up and running. Everything looks good in ISE, getting the correct policy hit - but the embedded wlc says it cannot assign vlan-id to the client from the name its getting from ISE: [auth-...

We are deploying an sd access infrastructure and customer wants to migrate their DC services (ISE, DHCP, AD, etc.) to one of fabric edge nodes.Would this work or do I need to keep this switch out of the fabric? In that case, can this services be on t...

Hello All, We are currently deploying DNA-c to our enterprise network, and for one of our new campus sites we want to create an SDA fabric. In our shared services block we have one ISE doing NAC that will serve as the policy plane for the fabric (Tru...

Hi FolksI have this design implemented for a client; FB1- F1 (eBGP)FB2-F2 (eBGP)FB1-FB2 (iBGP)I have imported some enterprise routes ( data center routes) into corporate VN, however, Fusion must also have reachability to those Corporate network VN fr...