I know SD Access can assign a port with closed authentication template for 802.1x authentication. I would like to know can the port authenticate user using eCert authentication?
-
-
-
-
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community
-
Forum Posts
Resolved! SD-access-add-new-switch
hello,I have two 9500 switches in stackwise as border node which will be connected to a 9407 switch with two links, I wanted to know is that the two links will be converted into L3 link ?? another question if i stoped the process of the lan automati...
I am setting up a SDA Demo using DNAC 1.3.3.7 and ISE 2.7 patch 1. I will have VN and IP Pool as below Site IP Pool VN ISE VLAN tag ID/Name 1 172.168.1.0/24 Employee1 172_168_1_0-EMPLOYEE1 2 10.1.1.0/24 Employee2 10_1_1_0-EMPLOYEE2 In...
Hello all!I can not find an answer on my question. Please help The issue:We need to have a number of ports with manual sgt mapping. We may configure it by DNAC as on a picture below.All IP connected to this port are mapped to an appropriate sgt and a...
I am working on a DNAC 1.3.3.7 now. I am confused about the ISE policy element setup for VLAN. From very early EFT guide, there is a statement for ISE VLAN ID/Name setup to match with DNAC IP Pool to Virtual Network: Note: DNA Center will generat...
Hi allSD-Access Fabric running with some Extended Nodes (C3560CX).Clients (Windows) complain about Duplicate IP Adresse. The weird thing is, that the reported MAC address is the MAC address from the Exteneded Nodes - Uplink Interface to the Edge Node...
Resolved! SD access unmanaged switch
Hello all! I need some help with simple question:Case: You have DNA\SDA architecture and you want to connect dumb switch for any endpoint devices in SD-Access port (e.g 9300 sw) and you need to auth thes endpoint devices. Again: SDA C9300----dumb SW-...
Hello everyone,I have a multi-site ISE deployment where PAN, MNT are installed at single location. Remaining 4 remote sites having 2 x PSN nodes and 2 x WLCsWe are planning to deploy 3-node DNAC cluster at any one of four remote site.As understood f...
Hello all,The company I work for uses SDAccess and I am trying to figure out how it has been setup, since I inherited the management of the whole infra.The deployment consists of several fabrics controlled by a single DNAC. The fabrics are connected ...
Hi there, afaik, currently stackwise virtual is not supported for 9400 deployed in SDA. Where can I get info that when it will be supported? Thanks in advance,
Good Day Everyone I have a customer who procured switches to replace a legacy network with DNAC for Wired, and also 36 new AP's with DNA Advanced Licensing.The challenge being the customer has existing 250+ AP's that are not licensed for DNA Advanced...
Hello All I need to connect Nexus 7K/9K router to the 48Y4C switch via 40G. Since these are uplinks by default, can these be connected to the 7K/9K like normal ports? Need to build BGP using routed sub interfaces. We are not using StackWise. ThanksP...
Hi, Could I use existing VLAN (which created manually) to create VN in DNAC? If it possible, how? I try to find this things in web but its none. Thanks,
Resolved! IS-IS and BGP domains in SD-Access
I have 2 questions about the following setup - Integrate Fusion Devices with the Legacy Network by Static Routing (Default + few specifics redistributed to IS-IS)- Legacy Core switches just have a single route back to the fusion covering all SD-Acces...
Hi all,I found out that there is a limit of 200ms of RTT from DNAC to Edge. So, in the case of a branch where that I have a satellite hop, like a VSAT, it is not possible to configure SD-ACCESS for the LAN? I was thinking of using SD-WAN as transit, ...
