Hi Folks,I've found myself in an interesting scenario. The nodes that we will be using for intermediate nodes are being used in production for L2 already. In theory I don't see a problem with us just adding to DNAC and using the free interfaces upstr...
-
-
-
-
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community
-
Forum Posts
Resolved! DNA Center VLAN-to-SGT automation
Hi Gents looking for the place in SDA manuals where process of assignment of SGT based on VLAN (VLAN-to-SGT mapping) at access-layer is described. It said to be in the "Host onboarding" section of user guide but either i'm blind or... Can anyone be o...
We have SDA which includes DNAC servers plus ISE integration The license is DNA premier which includes ISE license What will happen if the DNA license expires ? Is this will affect the DNAC GUI as to manage devices, configure policies, or access anal...
Resolved! Cisco SDA device change name
Hi Guys, I have 1 doubt but i wanted to confirm if any1 has tried this way:- I know this is possible to do through template but it seems easier to do through login on the switch, 1. Switch hostname:- if i change a fabric switch hostname through cli a...
Resolved! SD Access DNAC - Hardening
Hi All,Recently deployed SD Access. Please suggest what are the hardening points we need to consider for DNAC.Below points are already completed1. Tacacs Integration2. Syslog Configuration3. NTP4. Login Banner5. SNMP Configuration6. Backup Server Con...
ISE starting from something like 2.2 is known supporting multiple TrustSec policies matrices, when with the same SGT-set admin may vary with policies per NAD. In SDA, you usually have DNAC as orchestrator of TrustSec matrix with ISE reproducing only...
Hello all, is there a way to troubleshoot the enforcement of policies in the wireless environment within an SD-Access Fabric? Especially from wireless to wireless and without additional tools like Secure Network Analytics. On my test environment (Cat...
Hi there, I am planning to set up an L2VN without anycast gateway / SVIs in the fabric for a migration use case. The gateway of the corresponding L2VN will remain outside of the fabric at least throughout the migration period for several reasons and ...
Hi, Due to time constraints a rollback was done incorrectly. So after the switch was part of the fabric via LAN automation, the switch config was removed on the CLI (pnpa service reset). So steps as described in DNAC guide where NOT followed removing...
Resolved! AP migration from traditional to SDA
Hello team, I have a concern regarding the migration from traditional network to SDA, especially for the wireless part. This will be a full migration as we have 9k switches and 9k APs that we will convert to SDA. We have the 2 border / control plane ...
Where can I find the training video for "Overview of Software Defined Access", please.
Hello together,i have running multiple sda sites and already have devices with roles like BN, CP, E and so on.Now i must change the loopback0 address to another IP.I tested it and saw that all lisp sessions goes down and devices not able to update li...
Hi All-We are i the process of building out our fabric. Included in the design will be a stack of 9300s as a L2 Border handoff. I read https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html#L2_Border_Handoff but still...
HiWhen I try to assign ports to address pools in SD Access not knowing that the device is offline it fails as expected but in the Port assignment area of DNAC it maintains the intended port assignment. How do we ensure this is then pushed out to the...
Hi All,So when updating switches I noticed that a lot of my C3560CX-12PC-S switches are being split up in different platformsMost of them are in C3560C platform but that should be incorrect because the switch says there C3560CX-12PC-SSo i there a wa...
