Hello, everyone. I am quite early into SDN and I have some questions regarding the SD-Access fabric and how policies can be applied to it. From what I understand, the various security policies in the fabric can be either statically or dynamically con...
Hi, everyone. I've recently began studying SD-Access and my book mentions the following regarding the policy plane (TrustSec). ■ Scalable group: A scalable group is a group of endpoints with similar policies. TheSD-Access policy plane assigns every e...
Hi, we had situation where two nodes PAN,MNT must be installed on the cloud and two nodes PSN must be installed on prem, catalyst center (DNAC) installed on prem as well and we want to make integration with DNAC and ISE, question where we should enab...
Im learning SDA and setup a LAB and testing. there is a scenario for two bulilding each as a FIAB:using Catalyst Centerone Fusionthree sites:BLDG-1 Transit to FusionBLDG-2 Transit to Fusion via BLDG-1SDA_Transit I did most of steps on BLDG-1 C9200CX...
Hello, I would like to ask what is the required configuration for deploying a switch in Fabric-in-a-Box (FIAB) mode (just one stack of two switches, with no downlinks connected). I see that, in order to declare it as CP/BN/Edge in the Fabric Site C...
Hello team, I would like to ask if it is supported to have a Fabric-in-a-Box (FIAB) deployment with Edge Node switches connected to the FIAB switch (these cannot be stacked as they are located on different floors in a branch office). Is it supported ...
Hi All,I am looking at adding a Multisite Remote Border for guest services to an existing fabric and trying to determine the best location for it in the network. As it acts like an anchor WLC i'm suggesting on installing it behind our firewall in a D...
HiWhen I define a Border type in SDA by selecting or deselecting the Default to all Virtual Networks and Do not import external routes I can no longer change those selections. So if I have initially selected an Anywhere Border because that was appro...
Hello, In our SDA Fabric, we deployed some switches without LAN Automation. This manual underlay is built using SVIs and the Fabric Edge uplinks are L2 trunks. On those switches we are carrying non-SDA VLANs, with default gateway being located outsid...
Hi There,I would like to ask, in my environment we will deploy Catalyst Centre, WLC 9800, AP 9130 and 3102 series. Once all the devices has been managed through Catalyst Centre, can the WLAN configuration being done and push through Catalyst Centre? ...
Hi A customer wants netflow enabled access switch. I offered 9200 with Network Essentials base license. Now I am going through the datasheet again I see NetFlow feature is listed under DNA licenses. The lowest DNA add-on license that supports netflow...
Hi All,I've just been watching Cisco Live session "Deploying Your First Cisco SD-Access Project - BRKENS-2824" (great session by the way) and I have some questions about underlay scale.I'm currently working on a deployment that will have 2 x C9500 co...
Hi, Lets say i have ISE, DNAC, edge, intermediate, border and fusion firewall non cisco. Outside all of this doesnt support trustsec. 1. Where policy SGACL enforcement should be applied? Please tell me the most common practice 2. When packet return f...
Hi CommunityI am trying to install the signed certificated (CRT) via vManage but I got an error message: Failed to retrieve device data: Not able to find any device for CSR common name. Where did I make the mistake? the CSR was generated and the CRT ...
Gentsany idea why SDA EVPN is disabled in Subject & how to enable? Thanks
