02-11-2020 09:59 AM
Hi,
I would like to know if it is possible to modify the vlan ID assigned dynamically when host onboarding provisioning is configured.
if it is possible, i would like to know how i can do it.
Br,
Fidel Gonzalez
Solved! Go to Solution.
02-17-2020 12:56 AM
Hi Fidel,
Please see following Guide on How to Onboard Endpoints with ISE in SD-Access.
02-11-2020 11:26 AM
Hi,
If you go with dot1x/mab/easy auth on host-onboarding, then VLAN ID can be assigned based on policy configured in ISE (VLAN ID should be still the one that was originally provisioned by DNA-Center when IP Pools were first added).
Please refer to "Cisco DNA Center Fast Start Use Case: Software-Defined Access Guide" (section: Configure dynamic authentication with ISE):
Best regards,
Mariusz
02-12-2020 05:53 AM
@Mariusz Kazmierski is definitely right with the dynamic assignment via ISE. Adding additional information:
You can utilize the DNAC template editor to modify default auth template configs. For example, using the editor you can modify the DNAC critical auth vlan that gets used in the DefaultCriticalAuthVlan service-template. You can also utilize the template editor to tweak other standard configs that get deployed from the out-of-box auth templates. HTH!
02-18-2020 06:58 AM
Hi Mike,
This is really what i want, i will try to do it.
is there something specific that i need to know?
I am new in SDA.
Br,
Fidel Gonzalez
02-18-2020 07:12 AM
02-17-2020 12:56 AM
Hi Fidel,
Please see following Guide on How to Onboard Endpoints with ISE in SD-Access.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide