I am looking for Centralized DNAC deployment for Assurance purposes and Sd-Access. We have 3 sites and each site has 2000+ endpoints and 50 network devices. Sites are connected over IPsec with 50-70ms latency. So, what are the best deployment strateg...
Hi, I have a building like a Campus with different Departments at any Level of the Building. In some of that I use the same Switch for 2 Departments, so users are in different VRF at the moment. I don't know the MAc address or other info about the cl...
When creating SD-Access Fabric we use the transit-IPI used switch nodes borders Cisco Catalyst 9500 and fusion (you can used Firewall to share the VRF)either the firewall is not recommended as a fusion ???for the wireless which recommended in the fac...
Hi. Are there any guides on how best to handle voice services on a SDA network? I have a PoC setup working nicely for data, with .1x auth on the switchports, but I'm struggling to understand how to add the IP phones into the mix, now that there will...
-I had a c9200 device discovered by dna center and it showed a cli authentication error. -tried to delete it from inventory and I checked clean up configuration box. -and then I did a reset the device configuration. -but the device didn't removed and...
Hello community, We are migrating a campus from an existing MPLS campus with PE routers at each distribution block in the network. The original migration strategy was to acquire new hardware as intermediate nodes to be installed in the same location ...
Hi All, Is it supported for a fabric edge to also operate as a fabric internal border? We have a router that needs to connect to our network and based on its location the easiest place to connect it will be fabric edge. The router has a couple of net...
Hello, I am seeking some advice from those already involved in deploying SD-WAN/SD-Access - any help on the questions below would be greatly appreciated. I have not touched any SD-WAN/Access but currently manage ISR IOX-XE SD-WAN capable routers. My ...
Thanks for attending our March ATXs session! Here’s the post-session resources for easy reference. New to ATXs? An ATXs session, offered at no cost, is an hour of real-time learning led by Cisco experts, who will answer your technology questions thro...
Hi community,I know that when doing 802.1x on "traditionnal network" it is not a good idea to change the IP address (vlan) of the user between the machine authentication and the user authentication, otherwise the IP stack of the PC may not run a new ...
I just build a SD-Access fabric with two borders to go out to the DNAC and ISE through the fusion.My DNAC v. 2.1.2.5 is configuring with 3 interfaces:- eno1: for the gui access- enp94s0f0 for the communication to the fabric- enp94s0f1 for the cluster...
All,why get the command "bgp router-id interface loopback0" removed from the running-config when loopback0 is shutdown during operation ? Losing the BGP router-id isn't nice for bgp protocol.Nevertheless there are usecases e.g. SDA route convergence ...
Hello all,I'm in the process of spec'ing out equipment for a possible SDA roll-out in somewhat of a green field deployment. We would replace all our access layer switches with C9300 stackables at the edge. We're running a pair of 6807-XL switches i...
In a fully deployed SDA network, how would you go about capturing as much traffic as possible (SPAN/RSPAN/ERSPAN)? If you have a security solution that does full packet capture the goal would be to capture as much traffic as possible, in an SDA arch...
Hello everyone,I am looking for a guidance on Cisco SD-Access migration from traditional network. I am working on building new SDA fabric physically alongside to legacy network. SDA-access consists of new switches. Once that Sd-access is all setup an...
