Software-Defined Access (SD-Access)

sdaHello guys.I'm reading the RFC 6830 about the Lisp protocol.I have a doubt about the Map replay about a EID overlapping prefix. The RFC (Section 6.1.5.) said: When an ETR is configured with overlapping EID-Prefixes, aMap-Request with an EID that b...

I have a question about designing & assigning the IP Address Pools and SD-Access Policy across multiple Fabric sites.  First, is it a good design to have the “Users/Campus/Enterprise” VN be available across multiple Fabric sites so the same security ...

Hello,   I have a Customer that uses different PCs registered to different MS Active Directory domains (with no trust between each other) on the same LAN. I know that ISE can connect up to 50 isolated MS AD domains, but I would like to confirm that t...

Hello,   I know that ISE and Cat 9000 switches do support multiple authentication fallback configuration, including WebAuth. I would like to confirm if wired WebAuth based on ISE DB (eg. wired guest access) is supported in a SDA fabric, and in detail...

I've been doing routing/switching/security for more than 20 years, but I know nothing about SDN.  The documentation and videos I've found online are all High-level overviews.  They seem to be more marketing fluff than something useful for an engineer...

HelloIt was learned from Cisco Live's SDA Deep Dive session that need for fusion device will be eliminated in DNA Release 1.4.Data Center Switches, Firewall & WAN Border can directly connect to Fabric Borders Please correct me I am wrong

The question is moved to DNAC community 

Hi All, I understand that DNAC 1.2.10 provided the ability to deploy embedded 9800 eWLC on the Catalyst 9300 switch. I have researched and it appears that I need to install either IOS-XE 16.10.1e or 16.11.1c on the Catalyst 9300 along with the associ...

To backup configuration to a SFTP repository the following encryption methods are supported by OpenSSL client / DNAC appliance:ecdh-sha2-nistp256​ ecdh-sha2-nistp384​ ecdh-sha2-nistp521​ diffie-hellman-group14-sha1 Legacy/less secure encryption metho...

Hi there, I would like to know what are the ways to migrate catalyst 9k switches already running in the network which is configured with dot1x and needs to be migrated to Cisco SDA.  Current setup of the customer:They have 4 branches and 1 HQ where t...

With SDA/TRUSTSEC and ISE in the mix .Try to look at options. lets say you have a SGT for headless devices - cameras, HVAC, badge readers etc. So are you saying that create a VLAN/subnet for each of them ? So, then what do you put as the default VLAN...

is there an official documentation on CCO  about the supported Commands in the Command Runner? My customer found the list of supported commands online after having executed the Q+T. Welcome to Cisco DNA Center command runner.   You can access this wi...

Seeing following alert on DNAC for multiple switches. HTTPS is NOT reachable / SCP is reachableExpected : DNAC certificate has to be installed successfully and Device should be able to reach DNAC via HTTPSAction : Reinstall DNAC certificate Anyone ca...