Software-Defined Access (SD-Access)

Team, In preparation for our customer Alameda County's Executive Briefing Review could you please advise whether our Cisco SDA's micro-segmentation using Virtual Networks is CJIS for law enforcement and HIPAA for health care compliant?Today Alameda C...

sdaHello guys.I'm reading the RFC 6830 about the Lisp protocol.I have a doubt about the Map replay about a EID overlapping prefix. The RFC (Section 6.1.5.) said: When an ETR is configured with overlapping EID-Prefixes, aMap-Request with an EID that b...

I have a question about designing & assigning the IP Address Pools and SD-Access Policy across multiple Fabric sites.  First, is it a good design to have the “Users/Campus/Enterprise” VN be available across multiple Fabric sites so the same security ...

Hello,   I have a Customer that uses different PCs registered to different MS Active Directory domains (with no trust between each other) on the same LAN. I know that ISE can connect up to 50 isolated MS AD domains, but I would like to confirm that t...

Hello,   I know that ISE and Cat 9000 switches do support multiple authentication fallback configuration, including WebAuth. I would like to confirm if wired WebAuth based on ISE DB (eg. wired guest access) is supported in a SDA fabric, and in detail...

I've been doing routing/switching/security for more than 20 years, but I know nothing about SDN.  The documentation and videos I've found online are all High-level overviews.  They seem to be more marketing fluff than something useful for an engineer...

HelloIt was learned from Cisco Live's SDA Deep Dive session that need for fusion device will be eliminated in DNA Release 1.4.Data Center Switches, Firewall & WAN Border can directly connect to Fabric Borders Please correct me I am wrong

The question is moved to DNAC community 

Hi All, I understand that DNAC 1.2.10 provided the ability to deploy embedded 9800 eWLC on the Catalyst 9300 switch. I have researched and it appears that I need to install either IOS-XE 16.10.1e or 16.11.1c on the Catalyst 9300 along with the associ...

To backup configuration to a SFTP repository the following encryption methods are supported by OpenSSL client / DNAC appliance:ecdh-sha2-nistp256​ ecdh-sha2-nistp384​ ecdh-sha2-nistp521​ diffie-hellman-group14-sha1 Legacy/less secure encryption metho...

Hi there, I would like to know what are the ways to migrate catalyst 9k switches already running in the network which is configured with dot1x and needs to be migrated to Cisco SDA.  Current setup of the customer:They have 4 branches and 1 HQ where t...