Software-Defined Access (SD-Access)

Resolved! L7 rules for Meraki

Hello All,I am having an issue with a L7 rule - Geoblocking within the Meraki platform. We are attempting to access a site that WHOIS identifies as being the United States. When our geoblocking rules are turned on to deny traffic not from the US, w...

DNA Center/ISE integration

Hi All, Do we need the ISE and the DNA center to be implemented on the same site? or we just need to grant connectivity between them? is there any other requirements for this integration? Many Thanks,

FTD as fusion firewall with FMC ISE pxGrid

Hi, With reference to slide 49 in BRKSEC2845 (see attached file) If i use Cisco FTD as fusion firewall, and i want to use Src and Dst SGT in the fusion firewall for firewall access control rule. Do i still need to configure inline SGT at the border ?...

Resolved! SD-Access Voice Network Query

Hi Guys,I've done quite a bit of research the last few days and trying to draw up a design for moving our voice which is daisy-chained onto SD-Access and struggling with a few questions.If I want a phone to utilise the voice VLAN (which I presume aut...

Traffic type in SDA

Hi, Multiple places in the SDA configuration it is possible to define traffic types to be Data and/or Voice.Choose the Traffic type from the drop-down list. You can choose to send voice or data traffic through the virtual network.You have the option...

Layer-2 only network and Layer 2 Handoff Border

We have a SDA environment where we created a L2 Vlan with a Gateway (GW) outside Fabric. For the GW we created a L2 Handoff on the border, for the network we created a L2 Network with the option "Layer-2 only". Now we are facing some issues with ARP ...

Control Plane physical port cat9k border node in sda

Hi All, For Cat 9K switches used as Border and control nodes in an SDA setup. do we need to have a specific physical interface on the switch for control plane or we can provision all physical ports(interfaces) as a control plane port. Many Thanks...

DNAC|SDA|MACSec

HiWe are running a fully lan automated, SDA Fabric network with DNAC version 2.2.3.4 & C9300 IOS 17.3.4. We wanted to switch to host macsec, below given a sample commands for the while we are doing thru the CLI.I would like to know What is the best p...

Resolved! "Hub Hunting" in an SDA Environment

Hello All,I have a question here around best practices for rendering unauthorized network devices such as hubs or non-Cisco branded switches inoperable, specifically in an SDA environment. We have run into a spate of issues at some of our remote plan...

Resolved! Cisco SDA Transit Control Plane

What is the recommended hardware to run the Transit Control Plane functionality? We may have several sites in a MAN topology and would like to connect them via SD-Access Transit. Curious what is recommended for production hardware for Transit Contr...

Resolved! L2VNI with gateway behind a Border (DNAC 2.2.3.0+)

Hey folks, In the latest DNAC version 2.2.3.0 not yet in GA, the L2VNI feature is present, allowing the Fabric to provide L2 functionality across the fabric without the need for an IP Pool. This particularly helps in the case we want to keep the defa...

Resolved! Can a FIB node have a downstream Edge node uplinked to it

Hello Cisco Community, I understand that for SD-A supported topologies, a FIB node has historically been deployed for very small sites consisting of a single network closet. Though multiple switches can be deployed in such a site, in such cases they...

Resolved! Fabric VNS Scale

If I have a fabric and I add 9200 series switches that support only 4 virtual networks.. does that mean the entire fabric is limited to 4 virtual networks even if I have 9300/9500 deployed in the fabric..... I would not think so but looking for data...

Resolved! INFRA_VN DHCP for the APs on the border

Hey all,I'm wondering if there is any technical reason to why we couldn't put the DHCP server/pool for the INFRA_VN on the border nodes.As long as we put a pool on both borders for resilience that is the only thought I have. Currently, we don't have ...

Border GW interface address configuration

Hi,why border GW needs to have a loopback interface configured with the same IP address as anycast gateway?As far as I understand, this is because the border GW needs to advertise this network to the external L3 network and by configuring loopback wi...

Software-Defined Access (SD-Access)

Forum Posts

Resolved! L7 rules for Meraki

DNA Center/ISE integration

FTD as fusion firewall with FMC ISE pxGrid

Resolved! SD-Access Voice Network Query

Traffic type in SDA

Layer-2 only network and Layer 2 Handoff Border

Control Plane physical port cat9k border node in sda

DNAC|SDA|MACSec

Resolved! "Hub Hunting" in an SDA Environment

Resolved! Cisco SDA Transit Control Plane

Resolved! L2VNI with gateway behind a Border (DNAC 2.2.3.0+)

Resolved! Can a FIB node have a downstream Edge node uplinked to it

Resolved! Fabric VNS Scale

Resolved! INFRA_VN DHCP for the APs on the border

Border GW interface address configuration

Cisco + Splunk: It's a new day for your data.

Speed & Tech: Unveiling the Cisco-McLaren F1 Partnership

Congratulations to all the August-October 2023 winners!

A new chapter of the Spotlight Award begins!

Announcing Resources That Guide You to Success

Application Policy missing from menu

Dot1x Error

MTU for cEdge as Fusion

Multiple GBAC policies matrices in DNA center

DNA Center low impact mode contract

AP can't provision to fabric with WLC different building

Cisco SDA Border to Fusion Connectivity

SDA Transit Control Plane Node - View capacity

SD-ACCESS DESIGN

LAN Automation fails