Cisco DNA Integration with Active Directory

[AhmedUmair2142]

We are planning to integrate Cisco DNA with an active directory so that we can create the policy at user levels. 

Could you please guide me with their valuable inputs to perform this activity.

[Karthik Kumar Thatikonda]

Cisco DNA has policy implemented via ISE. Cisco DNA Center talks to ISE and imports Scalable Groups for users/things/devices/apps via PXGRID. Cisco DNA Center also pushes the policies into ISE via REST API. ISE would then push those policies (SGACL) down to the Network Devices where enforcement happens via RADIUS protocol.

ISE integrates with your Enterprise Active Directory for creating role-based policies. Below link, gives additional information on the integration.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/ise_active_directory_integration/b_ISE_AD_integration_2x.html

[vijha]

Hi,

You can integrate Active directory with ISE instead of integrating it with Cisco DNA Center. We use ISE 2.3 or higher to provide the below service in Cisco DNA Center.