Hi All,I've just been watching Cisco Live session "Deploying Your First Cisco SD-Access Project - BRKENS-2824" (great session by the way) and I have some questions about underlay scale.I'm currently working on a deployment that will have 2 x C9500 co...
-
-
-
-
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community
-
Forum Posts
Resolved! Cisco SDA Trustsec Concept
Hi, Lets say i have ISE, DNAC, edge, intermediate, border and fusion firewall non cisco. Outside all of this doesnt support trustsec. 1. Where policy SGACL enforcement should be applied? Please tell me the most common practice 2. When packet return f...
Hi CommunityI am trying to install the signed certificated (CRT) via vManage but I got an error message: Failed to retrieve device data: Not able to find any device for CSR common name. Where did I make the mistake? the CSR was generated and the CRT ...
Resolved! SD-Access compatibility matrix
Gentsany idea why SDA EVPN is disabled in Subject & how to enable? Thanks
HI All,I'm currently starting to rollout some fabric edge switches in a new site using LAN automation. I noticed that when deploying LAN-A, that you have the option to assign the discovered device to the building or floor level of the network hierarc...
Hi All,I am planning on installing a Cisco 9300X switch within my fabric site that will act as a L2 handoff border node to support migration. Looking at the Catalyst Center data sheet, the C9300X supports a maxium of 32,000 endpoints when deployed as...
PKI Config push Failed when provisioning WLC from DNAC WLC#ter mo Mar 4 01:31:42.745: %PKI-3-PKCS12_IMPORT_FAILURE: PKCS #12 import failed for trustpoint: sdn-network-infra-wan. Reason: Failed to read PKCS12 from url: https://20.20.20.20/api/v1/tr...
Resolved! Cisco SD Access Questions
HiSorry for this but I have some questions regarding Cisco DNA as it make me confusedFirst: when two host in the same layer 2 virtual network with anycast gateway and same ip subnet communicate over the fabric , the vni field in the encapsulated pack...
Resolved! SDA L2 VN - SDA Transport between sites
We have a Layer 2 Virtual Network (with gateway outside of the fabric) that we would like to stretch between SDA sites. Users would be in Site A and Site B, but the gateway would only be located in Site B. We would have SDA Transit between Site A a...
I want to use SGACL in SDA to make guest ssid only accessible to internet. From what I understand, it seems like I need to set ACL on Fabric edge guest ssid is included in fabric and I want to use psk I want to know more details.
Hello, team I’m deploying a DNAC environment version 2.3.7.7-70047 We have 2 C9500 BN/CP in co-located mode and configuring the L3-Handoff link against 2 Firewalls in active/passive cluster. Following BRKENS-2824 documentation due both BN/CP are not ...
Resolved! Onboard switch to DNAC
2 switches with 48 and 24 ports placed in stack.As a new requirement the 24 port poe switch replaced with 48 port switch. But after giving stack connectivity and provisioning new 48 port switch, we are able to access only first 24 ports of new switch...
interface Vlan1400 description Configured from Catalyst Center mac-address 0000.0c9f.f253 vrf forwarding VN1 ip address 192.168.0.1 255.255.252.0 ip helper-address 172.16.100.101 ip helper-address 172.16.100.102 no ip redirects ip route-c...
Hello could someone please explain to me, why we we will use "ip route-cache same-interface" instead of CEF on on the IP Transit Handoff SVIs and Edge Node SVIs? Shouldn't cef be more effective? Why would we choose fast-switching over cef here? ...
Hi together,I would like to find out whether my ideas for migration would work.A small sketch is attached.I would connect a C9300 to the existing C3850 in the branch office.I would initially use an IP transit there so that I have VLANs that I can put...
