Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi All,According to the ISE performance and scalability guide, RADIUS performance for PSN configured to handle both RADIUS and TACACS events, is limited to 25%. Can I ask if the 25% limit is throttled in the software as soon as TACACS is enabled on t...
HI All,I'm currently testing Selective Address Tracking for BGP Fast Session Deactivation (neighbor x.x.x.x fall-over route-map) on a Cisco 9500H switch running 17.15.5, and if the conditions in the route-map do not match the peer IP that I'm trackin...
Hi,I'm currently planning an FMC HA upgrade and trying to understand what services are impacted during the upgrade process. I understand that the FMC GUI, deployment operations, and logging etc will be impacted/limited during the upgrade process but ...
Hi All,I'm working on an ACI Multipod deployment comprising two pods, Pod1 for site1 and Pod2 for site2. Each pod will need to connect out to a common core network using BGP that is available at both sites (the core network provides the same routes a...
Hi All,I'm currently looking at another multisite SD-Access design for a small number of sites (~10) that all connect to a single hub/core site using metro-e WAN circuits. I'm looking to use SD-Access transit in this design with a "hub" fabric site t...
Thanks @Harold Ritter - That makes sense and I didnt think about it from that perspective. The feature works as we need, however that statement in the documentation confused me and I wasnt sure if the behavior I was observing was expected or not.Appr...
ThanksI've tested option 2 with ISIS and OSPF on a spoke site's border nodes, and I had to redistribute ISIS into OSPF and then configure a summary in OSPF to advertise a summary of the spoke site's loopbacks to the core. I also had to redistribute O...
Thanks for the response @jedolphi - So if we went with option 2, communication to/from the AP subnets at each of the spoke sites will be carried through LISP/SD-Access transit, entering and exiting through the hub site's BGP IP transit, and not nativ...
Ok so if we used a single L2 IS-IS underlay we would need to manually configure the BNs to redistribute LISP into IS-IS to allow the APs pools to be reachable outside of the fabric (which is needed for DHCP and if the WLCs are located centrally)?
Thanks. This is where my understanding lacks slightly. So if all of your fabric sites where part of a single L2 ISIS underlay, how do INFRA_VN subnets get advertised outside of the fabric, such as IP pools for APs? Typically these get advertised into...
