Hi AllI m currently working on a solution to integrate an IP Phone ( SIP100) into the SDA network . I have successfully managed to authenticate and authorize the device via 802.1x through ISE but failing to obtain an IP address from the DHCP Server ....
-
-
-
-
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community
-
Forum Posts
I just updated AAA Server settings in the Network Settings for a site. How do I push that change to the devices assigned to that site? Nothing happens when I click save and device controllability is enabled. It says I either need to assign to a site ...
Hi I am going to study ACI, and we know its very expensive and hard lab to setup. Anyone can share some experience? I heard there is free lab in cisco. Not sure how it works. Thank you in advantage.
I want to use closed authentication on some ports in SDA environment so I've configured appropriate ISE authorization rules with SGT included. Authorization works fine but it seems EDGE switches are not aware of IP-SGT mappings. How EDGE switch could...
Hypothetically if my main fabric site has SDA platforms which supports up-to 64 VNs and then I decide to bring online a remote site with FiAB using say 9200's (which only supports up-to 4 VNs), what happens here if I have more than 4 VNs configured a...
Hi, I am new to IOT area, so need some advise from the community.Scenario - Green field setupSetup - SDA, ISE, DNAC.Logical topology (see attached) (1) The BMS has both server component and client component (DDC controllers).I will be connecting all...
I am designing a campus LAN infrastructure based on Cisco SD-Access solution. My end-customer campus consists of 6 buildings. In the current network, there is a couple of distribution switches in each building connected, with two fiber-optic links,...
Hi, we want to integrate SDA Fabric DNAC with FortiAuthenticator for single Wireless SSID authentication with multiple dynamic VLAN assignment based on AD user groups. single SSID = if user belongs to CORP then assign vlan 10 but if user belong t...
in ISE , I will create many authorization profile and each one include the specific parameters (VN name, SGT name , Pool name) and this parameters should match the names in the DNA If i have Authorization profile 1 VN ENG SGT HR Pool name 172.16.1.1...
Hello, I have three sites with vEdge cloud installed and two kind of transport; internet and MPLS. I configured the internet transport on all vedge clous devices and the control status were Up in vManage. When i configure the MPLS transport on all ...
Can someone provide me some sample code in python to create a simple Profile Rule within DNAC via the api. I'm following this and it's not working https://developer.cisco.com/docs/dna-center/#!create-a-profiling-rule
Hello, community I'm having a hard time finding an answer to the following... With 2.1 DNA Center got the ability to create SGT, as well as policies with contracts between SGTs, what I do not understand now is what is the role of Cisco ISE now, a...
is there any way to call $_cli_result variable in action cli command string? I am trying to run this command action 3.0 cli command" cellular 0/2/0 lte sms send 1-xxx-xxx-xxxx $_cli_result" but unable to see the variable value in received text. anyth...
We are starting to implement SDA where I work and one of the engineers mentioned a "general VRF" to support different customers. Does anyone else have a config of a single vrf for multiple customers? Do they run separate VN's? It seems to me to defea...
Our objective is to support segregation / policy management / distinct access policies on a per host basis inside a LAN (SD-Access type of solution) The basic restriction we face is that the LAN isn’t segmented into multiple VLANs- there is one broad...
