Hello all,we have implemented SDA, but there seems to be a need for extra firewalling (fine-tuning with SGTs etc is proving to be a bit difficult). Routers are used for fusion functionality (no firewall there), so I was wondering if there is another ...
-
-
-
-
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community
-
Forum Posts
Hello everyone,We would like to use our “old” C2960X devices, which we have in large numbers, to connect simple devices such as printers or PCs that do not require PoE. The goal is to use SGT for these devices. I have already read that it is not poss...
Hello, is there any SD-Access Design where a Firewall is located inside the Fabric for SGT to SGT Stateful inspection?thanks
I want to know if if it is possible to apply the same policy to different SVI in SDASVI 100 =Policy ASVI 200 =Policy A
HIIs it possible for me to manage switches thats are not part of our SDA Fabric, they are in a dufferent part of the Network, i would like to manage these via DNAC so I could use DNAC to upgrdae Images etc, if its possible could someone tell me how ...
I am trying to add non fabric switch to fabric switch through trunk port.can anyone please tell me the steps to add it.
Resolved! SD Access AP pool
HiIn DNAC we can only define a single AP pool. Either the AP is auto assigned to that pool by a macro on the AP or we manually assign a port to the AP pool in the port assignment area. However, this only allows for one pool.We have a scenario where...
Resolved! Cisco SDA Transit Control Plane
What is the recommended hardware to run the Transit Control Plane functionality? We may have several sites in a MAN topology and would like to connect them via SD-Access Transit. Curious what is recommended for production hardware for Transit Contr...
Hi all,I installed application policy so I could configure QOS within DNAC. All was complete and the app policy section was showing but after leaving for an hour and coming back to it I can no longer see it as an option and cannot amend my config..Wh...
Resolved! Cisco SDA Border to Fusion Connectivity
Do all VNs from a SDA border node need to the same fusion device? We would like to take our Corporate traffic and fuse that to our GRT with a Nexus switch. We'd like to take our IOT and Guest VNs and run them through a firewall for policy and inspe...
We have SDA which includes DNAC servers plus ISE integration The license is DNA premier which includes ISE license What will happen if the DNA license expires ? Is this will affect the DNAC GUI as to manage devices, configure policies, or access anal...
Is there a command to view the size and capacity of the Transit Control Plane node database? Is there a way to see the number of prefixes in the database and what the max capacity is for the device in question? Maybe it's a non-issue but wanted to ...
Dear all,I have a reoccurring issue, where commands I manually remove from SDA devices keep showing up.I want to disable "snmp-trap enable traps syslog" on the devices. The first time I tried to do this via applying a template through network profile...
Hi All,Quick question hopefully. I noticed that when DNA Center provisions a L2 network within a fabric site, its allocates a L2VNID starting 8188 for local segments and 16196 for multisite remote border/anchor VN segments.If I remove and re-add an p...
Hi Everyone, I'm currently in middle of a rollout of Cisco SDA across our estate incorporating Cisco DNA Center, ISE, ACI etc. Its going well :). Most of my sites are either private fiber or leased circuits which have been migrated to Cisco without a...
