Hello, In my understanding, ISE 'downloads' the IP-to-SGT mappings of the endpoints connected to the switch. This allows policy verification and permit/deny decision by the switch. Although rules and policies are configured between SGT's, the permi...
-
-
-
-
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community
-
Forum Posts
Hi all,I'm running DNAC ver 2.2.2.8 and after upgrading the DNAC to 2.2.2.8 I can't provision my fusion router (ISR4331, 16.12.05).The ISR4K was already configured and everything was working fine until the upgrade.The error I get is: Invalid configur...
Hello, How does Assurance define or update the “Inter-device Link” ports availability? One of the trunk ports seems to be down, and the device 360 health is reduced to 1/10. But i can verify that the trunk port informed is up all the time. Is there ...
Hi, I would like som clarification about certificates in DNAC 2.2.3.4.How can I replace the certificate for the admin-portal?Under System/Settings/Trust & Privacy/Certificates there is a button to replace certificate. Is this certificate only for the...
Dear Community, Kindly ask I have customer running ISE 2.7 and now they have purchased to us for SDA implementation but ISE 2.7 will be terminated and replaced with 3.x, my questions are below : 1. if they have run SDA with Cisco ISE 2.7 and next yea...
Resolved! Intermediate node SD Access
Hi, i have a question about the number of intermediate nodes in a SD Access fabric. Can i add two intermediate nodes behind each other? So you would get: Location A Border Node --> Location B Intermediate Node --> location C Intermediate node --> Loc...
Hi FolksDoes deleting the VNs and IP Pools associated to it from DNAC will remove related configuration from all devices ?How can we check what commands will be pushed to devices before DNAC start applying changes ? Is there a preview of commands ?
Register today. WAAS has been Cisco's WAN optimization solution for almost a decade now. However, with the fast-changing networks of today and the evolution of SD-WAN and Cloud deployments, it is important to transition to a solution that is built f...
Hello I am refering to the following URL however I can not understand yet. So I would like to ask how to configure the LISP routing for same segment. https://community.cisco.com/t5/networking-documents/lisp-fundamentals-and-troubleshooting-basics/ta-...
HelloAs I am involved in testing SDA solution, I am wonder if there is any possibility to implement 2 links bounded in port-channel between Border and Edge as a Fabric link (route-port with is-is) Of course I would prefer automated solution from DNA ...
Hello All, Looking for some experience or tips. We are looking at buying 9300s over 9200 for fabric edge. It will be 48 port and the majority of ports will be used for Wired + fabric enabled APs. I believe looking at documentation 9300 is the better ...
Hi Folks, Going through the SDA fabric Guest SSID creation on DNAC, I am trying to figure out how to apply Hotspot Guest portal without ISE because I don't have ISE deployed in the network.Any chance of creating a hotspot portal on DNAC, which gets p...
Hi FolksI have a VN in fabric which got two IP poolsand I want block the communication between them using SGT. Users get authenticated to network with 802.1x using MAB and machine authentication.However, I don't want to make user groups on ISE but do...
Hi, I am doing a SDA design and the customer already has a 5520 controller that support SDA.But I would like to ask them to purchase an 9800. I know the 5520 have EOL announced, but are there any other good reasons to use a Cat9800 instead of AirOS i...
How doesWhen running a distributed deployment setup for ise, its recommended to run the pxgrid persona by itself. how does that integration works from the dna side? when you add an ise server you are only allowed to add one pxgrid ip ? how does a fai...
