What's the correct way to do multi-tenancy in SD-Access? I haven't been able to find anything about it. Is it just using separate VN's? - but that doesn't seem like real multi-tenancy, as a single organisation/tenant could have multiple VNs for their...
-
-
-
-
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community
-
Forum Posts
Hi AllI m currently working on a solution to integrate an IP Phone ( SIP100) into the SDA network . I have successfully managed to authenticate and authorize the device via 802.1x through ISE but failing to obtain an IP address from the DHCP Server ...
Hi, I am reading this guide https://community.cisco.com/t5/networking-documents/how-to-cisco-dna-center-ise-integration/ta-p/3896410 on DNAC & ISE integration. (1) If i use self-signed in DNAC and ISE, just follow all the steps in the URL above and t...
Hi AllI m currently working on a solution to integrate an IP Phone ( SIP100) into the SDA network . I have successfully managed to authenticate and authorize the device via 802.1x through ISE but failing to obtain an IP address from the DHCP Server ....
I just updated AAA Server settings in the Network Settings for a site. How do I push that change to the devices assigned to that site? Nothing happens when I click save and device controllability is enabled. It says I either need to assign to a site ...
Hi I am going to study ACI, and we know its very expensive and hard lab to setup. Anyone can share some experience? I heard there is free lab in cisco. Not sure how it works. Thank you in advantage.
I want to use closed authentication on some ports in SDA environment so I've configured appropriate ISE authorization rules with SGT included. Authorization works fine but it seems EDGE switches are not aware of IP-SGT mappings. How EDGE switch could...
Hypothetically if my main fabric site has SDA platforms which supports up-to 64 VNs and then I decide to bring online a remote site with FiAB using say 9200's (which only supports up-to 4 VNs), what happens here if I have more than 4 VNs configured a...
Hi, I am new to IOT area, so need some advise from the community.Scenario - Green field setupSetup - SDA, ISE, DNAC.Logical topology (see attached) (1) The BMS has both server component and client component (DDC controllers).I will be connecting all...
I am designing a campus LAN infrastructure based on Cisco SD-Access solution. My end-customer campus consists of 6 buildings. In the current network, there is a couple of distribution switches in each building connected, with two fiber-optic links,...
Hi, we want to integrate SDA Fabric DNAC with FortiAuthenticator for single Wireless SSID authentication with multiple dynamic VLAN assignment based on AD user groups. single SSID = if user belongs to CORP then assign vlan 10 but if user belong t...
in ISE , I will create many authorization profile and each one include the specific parameters (VN name, SGT name , Pool name) and this parameters should match the names in the DNA If i have Authorization profile 1 VN ENG SGT HR Pool name 172.16.1.1...
Hello, I have three sites with vEdge cloud installed and two kind of transport; internet and MPLS. I configured the internet transport on all vedge clous devices and the control status were Up in vManage. When i configure the MPLS transport on all ...
Can someone provide me some sample code in python to create a simple Profile Rule within DNAC via the api. I'm following this and it's not working https://developer.cisco.com/docs/dna-center/#!create-a-profiling-rule
Hello, community I'm having a hard time finding an answer to the following... With 2.1 DNA Center got the ability to create SGT, as well as policies with contracts between SGTs, what I do not understand now is what is the role of Cisco ISE now, a...
