Hi Guys, I have 1 doubt but i wanted to confirm if any1 has tried this way:- I know this is possible to do through template but it seems easier to do through login on the switch, 1. Switch hostname:- if i change a fabric switch hostname through cli a...
Hi All,Recently deployed SD Access. Please suggest what are the hardening points we need to consider for DNAC.Below points are already completed1. Tacacs Integration2. Syslog Configuration3. NTP4. Login Banner5. SNMP Configuration6. Backup Server Con...
ISE starting from something like 2.2 is known supporting multiple TrustSec policies matrices, when with the same SGT-set admin may vary with policies per NAD. In SDA, you usually have DNAC as orchestrator of TrustSec matrix with ISE reproducing only...
Hello all, is there a way to troubleshoot the enforcement of policies in the wireless environment within an SD-Access Fabric? Especially from wireless to wireless and without additional tools like Secure Network Analytics. On my test environment (Cat...
Hi there, I am planning to set up an L2VN without anycast gateway / SVIs in the fabric for a migration use case. The gateway of the corresponding L2VN will remain outside of the fabric at least throughout the migration period for several reasons and ...
Hi, Due to time constraints a rollback was done incorrectly. So after the switch was part of the fabric via LAN automation, the switch config was removed on the CLI (pnpa service reset). So steps as described in DNAC guide where NOT followed removing...
Hello team, I have a concern regarding the migration from traditional network to SDA, especially for the wireless part. This will be a full migration as we have 9k switches and 9k APs that we will convert to SDA. We have the 2 border / control plane ...
Where can I find the training video for "Overview of Software Defined Access", please.
Hello together,i have running multiple sda sites and already have devices with roles like BN, CP, E and so on.Now i must change the loopback0 address to another IP.I tested it and saw that all lisp sessions goes down and devices not able to update li...
Hi All-We are i the process of building out our fabric. Included in the design will be a stack of 9300s as a L2 Border handoff. I read https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html#L2_Border_Handoff but still...
HiWhen I try to assign ports to address pools in SD Access not knowing that the device is offline it fails as expected but in the Port assignment area of DNAC it maintains the intended port assignment. How do we ensure this is then pushed out to the...
Hi All,So when updating switches I noticed that a lot of my C3560CX-12PC-S switches are being split up in different platformsMost of them are in C3560C platform but that should be incorrect because the switch says there C3560CX-12PC-SSo i there a wa...
Hi Guys, I spotted these errors in the DNAC and i was wondering is this a concern or is it normal? I can create and remove these as i would expect but the error indicates its associated to a VN and this must be removed before deletion. Can anyone exp...
Hello all,We are running DNAC 2.3.5.5-70026. We have a subnet pool (vlan) dedicated to card readers which are silent hosts. In order to overcome problems related to silent hosts, we decided to enable ip-directed broadcast (and L2 flooding) for the sp...
Hi Folks,Just wondering if this is possible. I look at DNAC and in the fabric site SSIDs i have to assign an IP pool. If I wanted an SSID VLAN to be deterministic of a dynamic VLAN from ISE is this not possible?ThanksJ
