05-09-2019 10:48 PM
We are planning to integrate Cisco DNA with an active directory so that we can create the policy at user levels.
Could you please guide me with their valuable inputs to perform this activity.
05-10-2019 10:40 AM
Cisco DNA has policy implemented via ISE. Cisco DNA Center talks to ISE and imports Scalable Groups for users/things/devices/apps via PXGRID. Cisco DNA Center also pushes the policies into ISE via REST API. ISE would then push those policies (SGACL) down to the Network Devices where enforcement happens via RADIUS protocol.
ISE integrates with your Enterprise Active Directory for creating role-based policies. Below link, gives additional information on the integration.
05-21-2019 07:31 AM
Hi,
You can integrate Active directory with ISE instead of integrating it with Cisco DNA Center. We use ISE 2.3 or higher to provide the below service in Cisco DNA Center.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide