My understanding is that shred services will be available in 1.4. Correct? When will 1.4 be FCS? Thanks
My understanding is that shred services will be available in 1.4. Correct? When will 1.4 be FCS? Thanks
Hi If you have an IP-ACL on an SVI Interface today. How can I implement it into a SD-Access Fabric?I'm not meaning a micro segmentation. Just for example deny any icmp traffic for a specific device.No Firewall in front of the site. Do DACL does the j...
Hi Does anybody know or have a guide how to configure Wired Web Authentication (SDA with ISE)? Because I don't find on SDA how to do this.I checked the templates (Close Auth, Auth) but both are with 8021.X. Thanks and regard.
Hi community, in a current customer SDA project, we faced a scaling question for which I could not find an answer in Cisco documentation: Is there a scaling limit for amount of Fabric Access Points connected to an Edge (Switch Stack) ? Thanks in adva...
I would like to enable SGT based policy between Virtual Networks based on SGTs. The fusion device is a 9300s switch and I understand I have two options: 1. SXP between the fusion device and ISE to receive IP to SGT mappings + Enable Enforcement of th...
If 2 border/control plane nodes exist and DNAC 1.2.12 or 1.3.05 is being used what is the recommended procedure to swap in new upgraded hardware? These versions of DNAC have a limit of 2 CP so the only procedure I can see working is to remove one of ...
Hi,suppose there is customer with 3 separate building (each has several floors). Access switches at floors and they connected to distribution switches. There is one room in one building acting as central place, so central core switches (connect all d...
Hi, We use DNAC 1.3.1.x and we do discovery of Catalyst 9300 switch running IOS-XE 16.12.1 using SNMPv3 credentials.Discovery is successful and when we enable telemetry for Assurance (Optimal Visibility) then DNAC provisions the switch with DNAC's IP...
We recently upgraded DNAC to 1.3.1. Before we had one pxGrid client for SDA and two pxGrid clients for DNA assurance. After upgrade we now see a new pxgrid client dnac_dnac_ndp on ISE and the other old pxGrid clients are offline. Everything seems to ...
I have a issue with 802.1X, when I connect a laptop to port G1 / 0/2 it authenticates successfully and is reflected with the command show authentication session int g1 / 0/2 det and also in ISE but when I connect a second device in The G1 / 0/3 port ...
Team, In preparation for our customer Alameda County's Executive Briefing Review could you please advise whether our Cisco SDA's micro-segmentation using Virtual Networks is CJIS for law enforcement and HIPAA for health care compliant?Today Alameda C...
Hi, when I want to add an additional ip pool to an VN of a fabric site, because the number of clients increaded, how is 802.1x dealing with this? Do I need create a resultset within ISE for each ip pool and do some kind of loadbalacing (something lik...
sdaHello guys.I'm reading the RFC 6830 about the Lisp protocol.I have a doubt about the Map replay about a EID overlapping prefix. The RFC (Section 6.1.5.) said: When an ETR is configured with overlapping EID-Prefixes, aMap-Request with an EID that b...
I have a question about designing & assigning the IP Address Pools and SD-Access Policy across multiple Fabric sites. First, is it a good design to have the “Users/Campus/Enterprise” VN be available across multiple Fabric sites so the same security ...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 11-18-2024 05:04 AM | ||
| 10-27-2024 07:49 AM | ||
| 08-08-2024 03:55 AM | ||
| 07-17-2024 05:19 AM | ||
| 07-08-2024 01:13 AM |