DNA Center VLAN-to-SGT automation

[Andrii Oliinyk]

Hi Gents

looking for the place in SDA manuals where process of assignment of SGT based on VLAN (VLAN-to-SGT mapping) at access-layer is described.

It said to be in the "Host onboarding" section of user guide but either i'm blind or...

Can anyone be of help? thanks in advance

[jalejand]

Hi Andy

It can only be done when creating the VLAN/Fabric Pool in Host Onboarding, cannot be edited after.

[Andrii Oliinyk]

Hi

could u pls refer me to corresponding point in the documentation?

thanks in advance

[jalejand · Accepted solution]

Hi Andy

By bad, in earlier versions of Cisco DNA Center (before the new Fabric configuration page), you could not edit it. Only some of the fields were editable after deploying a pool. This will be the case even in latest versions if you are editing the VLAN/Pools from the host onboarding page (classic view).

If you switch to the new interface ( the one that says "Preview New SD-Acces Beta", starting from 2.3.x.x if I'm not wrong), you can go to "Virtual Networks", "Anycast Gateways" and then Edit the pool you want to edit.


You will be able to configure the SGT for the VLAN itself from there:

 

[Andrii Oliinyk]

Thanks a lot. Just one more Q pls just for academical interest: are we as well able to modify(customize) VLAN ID on that page? 

[jalejand · Accepted solution]

Unfortunately not, the option is greyed out in the new UI (once its deployed).

In both classic and new UI, you can customize the VLAN ID and name the first time its being deployed, just not after.

[KevinR99]

Hi

If we apply an SGT to an Anycast gateway where do we see that applied in the edge config? I see my SGT in "show cts Environment-data" but I don't see the SGT applied anywhere as a static assignment to the gateway,svi or vlan.  I'm trying to replicate the function of an access-group on an SVI in a traditional network.  Is there any way to apply an SGT to a whole Anycast gateway's subnet then subsequently use that as an any to SGT or SGT to any type function.  Much as you would do via an ACL/Access-group based on IP's?

Kev.