I want to use closed authentication on some ports in SDA environment so I've configured appropriate ISE authorization rules with SGT included. Authorization works fine but it seems EDGE switches are not aware of IP-SGT mappings. How EDGE switch could...
-
-
-
-
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community
-
Forum Posts
Hypothetically if my main fabric site has SDA platforms which supports up-to 64 VNs and then I decide to bring online a remote site with FiAB using say 9200's (which only supports up-to 4 VNs), what happens here if I have more than 4 VNs configured a...
Hi, I am new to IOT area, so need some advise from the community.Scenario - Green field setupSetup - SDA, ISE, DNAC.Logical topology (see attached) (1) The BMS has both server component and client component (DDC controllers).I will be connecting all...
I am designing a campus LAN infrastructure based on Cisco SD-Access solution. My end-customer campus consists of 6 buildings. In the current network, there is a couple of distribution switches in each building connected, with two fiber-optic links,...
Hi, we want to integrate SDA Fabric DNAC with FortiAuthenticator for single Wireless SSID authentication with multiple dynamic VLAN assignment based on AD user groups. single SSID = if user belongs to CORP then assign vlan 10 but if user belong t...
in ISE , I will create many authorization profile and each one include the specific parameters (VN name, SGT name , Pool name) and this parameters should match the names in the DNA If i have Authorization profile 1 VN ENG SGT HR Pool name 172.16.1.1...
Hello, I have three sites with vEdge cloud installed and two kind of transport; internet and MPLS. I configured the internet transport on all vedge clous devices and the control status were Up in vManage. When i configure the MPLS transport on all ...
Can someone provide me some sample code in python to create a simple Profile Rule within DNAC via the api. I'm following this and it's not working https://developer.cisco.com/docs/dna-center/#!create-a-profiling-rule
Hello, community I'm having a hard time finding an answer to the following... With 2.1 DNA Center got the ability to create SGT, as well as policies with contracts between SGTs, what I do not understand now is what is the role of Cisco ISE now, a...
is there any way to call $_cli_result variable in action cli command string? I am trying to run this command action 3.0 cli command" cellular 0/2/0 lte sms send 1-xxx-xxx-xxxx $_cli_result" but unable to see the variable value in received text. anyth...
We are starting to implement SDA where I work and one of the engineers mentioned a "general VRF" to support different customers. Does anyone else have a config of a single vrf for multiple customers? Do they run separate VN's? It seems to me to defea...
Our objective is to support segregation / policy management / distinct access policies on a per host basis inside a LAN (SD-Access type of solution) The basic restriction we face is that the LAN isn’t segmented into multiple VLANs- there is one broad...
Hi SDA Experts, we have a streched serverfarm between two buildings, now we connected this serverfarm with 2x Internal-Border per Building all belonging to the same fabric via eBGP and manual L3-out using sub-interfaces. The serverfarm network is n...
Hi together, seems I am doing something wrong. Any clue "what" would be very appreciated.I had several problems with the WiFi so I doubted the settings and performed a reset to factory defaults. Initially from the menu in the EWC, later by the mode b...
There is a new unboxing video of the Catalyst 9124 AP with Linus Sebastian here: https://video.cisco.com/video/6305850937112 Leave a comment about your favorite feature below!
