SD Access Question

[benolyndav]

Hi

I want to allow one subnet to an host on an SDA Site and block all other subnets, all our sites are SDA is this possible and if so how can I achieve this please.??

Thanks

[Flavio Miranda · Accepted solution]

@benolyndav 

 SGACL. You create on the DNAC and DNAC update it to ISE which apply to switches. This video will explain the details

https://www.labminutes.com/rs0126_sda_access_policy_trustsec_1

[balaji.bandi]

You mentioned SDA - but what components in that SDA, DNAC and ISE in place ?

with ISE you can do contracts , Macro or Micro level segmentation.