Hello!I have used this guide to configure our SBEN https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/2-3-5/user_guide/b_cisco_dna_center_ug_2_3_5/b_cisco_dna_center_ug_2_3_5_chapter_01110.html...
-
-
-
-
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community
-
Forum Posts
Resolved! Trustsec and static mappings
HiI'm testing Trustsec in my SD Access lab. I can assign 2 ports on edge switches to different groups then apply a policy that blocks pings and it works fine. I'm not authenticating the users so I statically assign an SGT via DNAC when I assign the...
Dears, We are running 2 ISE VMs in one ESXI Server and we are looking to migrate both of them one by one to two UCS Servers running under micorosft windows server standard 2022, The ISE is integrated with Firepower and DNAC , we are looking for way ...
Resolved! Anycast gateway config
HiMy understanding was when I create an Anycast gateway in SDA it is pushed out to the edges as an SVI for the clients on the Edge to use. I also understood that on the Border/CP the same IP address was pushed out but this time as a loopback address...
We are running ISE1 standalone.We are currently rebooting ISE1 due to an issue.We have ISE2 ready, which is a clone of ISE1 (UCS is different). I will disconnect the uplink of ISE1 connected to FUSION and connect the ISE2 cable.Once ISE1 has finished...
SD-Access looks great and all, but I'd love to hear from people who have fully deployed SDA for a fairly large campus. Anyone willing to talk about the good and bad, the pretty and the ugly? Specifically, any cities or airports with SDA fully deploye...
I have a Campsu network that is working on SD-Access but the wireless solution will not be Cisco WLC it will be Huawei WLC so I need a guide on how the design and the required configurations on the sd-access part I think it will be a traditional way ...
HelloSW 2.3.7.6 (but i believe topic is relevant to any code). Few more details to Subject:1) u want to filter templates ever applied to devices within arbitrary site & u use this filtering tool in the navigation pane2) u see list of templates & rele...
HiWhen migrating from from legacy switches to SDA Edges I need to transfer the port descriptions. I usually assign a large range of ports to an address pool but that would only allow me to assign one description across all those ports in the range. ...
Resolved! SDA
Hello, I have a few questions in regard to SDA Border node redundancy.1. Is it recommended to run ISIS between two redundant border nodes ? I see some documentation that shows the nodes connected, but not much is mentioned in regard to what underlay ...
What should be the basic configuration for a Cat9k port that connects to a 9120AX AP configured for flex mode and inline SGT tagging?Regards
Hi Guys,So i couldn't find this in the knowledge article or anywhere else but currently we are changing up C9300-24P for a smaller version C9200-12P Due to getting a smaller closet for the switch. and 24 being too big for all the links.Instead of cho...
Resolved! Smallest/cheapest FiaB hardware? 9200?
Hello world, I'm looking for an appropriate SD-Access solution for very small sites. Like 5-15 LAN ports. Looking into Fabric in a box deployment with hosts directly connected to it. Could I use a small 9200 switch as FiaB in this scenario? Or even a...
Hello, I have a situation where we need to connect Extended node to fabric edge , and I have the follwoing questions: 1- Can we connect the extended node switch c3560-CX to fabric edge C3650 ? (as far as I know it should be supported, but I need d...
In traditional WLC deployments you can offload multiple SSIDs off into the same VLAN. Our use case is having a Guest SSID that uses portals, but some Guest organizations that are onsite all of the time want to do 802.1x authentication. In traditiona...
