VN Segmentation in SD Access

[benolyndav]

Hi

We ahve a Certain VN in SDA and I am wondering if its possible to apply segmentation within the VN itself,? I wan to connect some door controllers to this VN but dont want the controllers to be able to talk to any other hosts within this VN,

I just want the Controllers to have access to some external URls.

Thanks

[Preston Chilcote · Accepted solution]

Yes!  This is called Micro Segmentation.  You assign each device a SGT and configure SGACLs (aka Access Contracts) in DNA (which will sync to ISE).