In a fully deployed SDA network, how would you go about capturing as much traffic as possible (SPAN/RSPAN/ERSPAN)? If you have a security solution that does full packet capture the goal would be to capture as much traffic as possible, in an SDA arch...
-
-
-
-
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community
-
Forum Posts
Resolved! Migration to SD-Access
Hello everyone,I am looking for a guidance on Cisco SD-Access migration from traditional network. I am working on building new SDA fabric physically alongside to legacy network. SDA-access consists of new switches. Once that Sd-access is all setup an...
Hello we are currently upgrading our network all c9k series and we are installing only DNA the network will be layer 3 routed access my 1st question can i use DNA to auto config my switches , or better to configure my switches manually then att...
Resolved! SD-Access Dual Default Border
In a Deployment with a Dual Default Border Setup. What kind of connectivity must be configured between the two border?Is it necessary to have a ISIS relationship between them? Or can I remove this configuration (from LAN Automation) after applying th...
Resolved! Route leaking using Prefix-Lists on Fusion Router only works with directly connected networks
Hi All, I'm trying to emulate as best as possible SD Access under Eve-NG using CSR routers as the Border node and Fusion Router and a combination of CSRs and L2 IOL switches to emulate Fabric nodes. The CSR's don't work with subinterfaces so I have h...
We are in the process of building a SD Access lab. Based on some sample topologies we've been provided with this is what our lab looks like.The top two switches are our Fusion devices (Cat 3750Xs), the middle two are Cat 9300 Border nodes and the tw...
Hello,I have implemented SDA Fabric.According to the different cisco design guide, on Border nodes BGP should be configured like this : router bgp [underlay AS number] bgp router-id [interface] bgp log-neighbor-changes ! fusion router is an eBGP neig...
Hello Cisco community,Recently we've tested a failover of one server connected to the Fabric. The server has 2 management interfaces, each connected to a different edge switch, one interface is active and the second one in standby mode. When the fabr...
Imagine a large enterprise with both IT and OT networks where challenges include: 1) Keeping up with lifecycle - too many network silos engineered for specific use cases, too many platforms to lifecycle.2) Operations - network landscape is complex, s...
In traditional networks a subnet has (usually) a 1:1 association with a location. In desktop management systems (such as Microsoft SCCM) these subnet based "boundaries" are used to perform client management tasks. Using SD-A a subnet is now a fabric ...
I installed DNA Center server, at server I added two border nodes (Cisco catalyst 9500) with discover OKI added 8 switch edge with LAN Automation (Cisco catalyst 9400) OKI created fabric between two Fusion routers (cisco catalyst 9300) and two border...
So I've been told that Cisco DNA (or "software defined campus") has ways to do wired/wireless handoff, so that you could seamlessly transition from a wired connection to a wireless one without dropping traffic. Supposedly this works because it can re...
Resolved! 9800 WLC Fabric is not coming up
Hello everyone, I am in the middle of an SDA implementation for a customer. DNA center version is 1.3.3.9. We have 9500s and 9200s as border and edges with 16.12.x version software on them. For wireless we have 9800-L WLC with 9115AX access points. W...
Resolved! Enterprise MPLS vs SD-Access
In the past, enterprise MPLS was used to deploy macro-segmentation capability. Today, both SD-WAN and SD-Access have their own native macro-segmentation techniques (service VPNs & VNs). While interoperability with enterprise MPLS is possible, it cert...
I believe I understand the basic differences between using SD-Access transit and using ip transit between different fabric sites. One of the big benefits of SD-Access transit is the preservation of SGT tagging between sites. This is where Im a littl...
