Software-Defined Access (SD-Access)

Hi All, I have a hierarchy that consists of a large campus with the setup as below. This will be a single fabric site at the London level. This all works ok, however I have hit an issue when configuring wireless. I have discovered the WLC and assigne...

Hi all,I configured my SDA network and configured Closed Auth as authentication template in the onboarding pool.When i connect an endpoint to the FE switch it seems it is not configured for dot1x by default while if i explicity configure the port (as...

Hello,We have server farm block consisting of top-of-rack switches that are then up linked to Distribution switches that then connect to the SD-Access Fabric Borders, so is it good idea to configure Distribution switches to act as fusion device as we...

My understanding is that shred services will be available in 1.4. Correct? When will 1.4 be FCS? Thanks

Hi If you have an IP-ACL on an SVI Interface today. How can I implement it into a SD-Access Fabric?I'm not meaning a micro segmentation. Just for example deny any icmp traffic for a specific device.No Firewall in front of the site. Do DACL does the j...

Hi Does anybody know or have a guide how to configure Wired Web Authentication (SDA with ISE)? Because I don't find on SDA how to do this.I checked the templates (Close Auth, Auth) but both are with 8021.X. Thanks and regard.

Hi community, in a current customer SDA project, we faced a scaling question for which I could not find an answer in Cisco documentation: Is there a scaling limit for amount of Fabric Access Points connected to an Edge (Switch Stack) ? Thanks in adva...

I would like to enable SGT based policy between Virtual Networks based on SGTs. The fusion device is a 9300s switch and I understand I have two options: 1. SXP between the fusion device and ISE to receive IP to SGT mappings + Enable Enforcement of th...

Hi, We use DNAC 1.3.1.x and we do discovery of Catalyst 9300 switch running IOS-XE 16.12.1 using SNMPv3 credentials.Discovery is successful and when we enable telemetry for Assurance (Optimal Visibility) then DNAC provisions the switch with DNAC's IP...

We recently upgraded DNAC to 1.3.1. Before we had one pxGrid client for SDA and two pxGrid clients for DNA assurance. After upgrade we now see a new pxgrid client dnac_dnac_ndp on ISE and the other old pxGrid clients are offline. Everything seems to ...

I have a issue with 802.1X, when I connect a laptop to port G1 / 0/2 it authenticates successfully and is reflected with the command show authentication session int g1 / 0/2 det and also in ISE but when I connect a second device in The G1 / 0/3 port ...

Hi, when I want to add an additional ip pool to an VN of a fabric site, because the number of clients increaded, how is 802.1x dealing with this? Do I need create a resultset within ISE for each ip pool and do some kind of loadbalacing (something lik...