About Sylvain_Che

Sylvain_Che · 08-17-2023

Hello, By default DNAC polls a network device via SNMP every 10 minutes on many OIDs. For low-end or legacy switches running old IOS version (C3650 - IOS-XE 3.6.8E for example), I see SNMP CPUHOG on a few specific OIDs. These CPU spikes lead to some ...

Sylvain_Che · 06-13-2023

Hello, I'm planning a multisite SD-Access Fabric. Both sites are connected to an ACI Fabric and connectivity between both SDA Fabric sites should occur via this ACI Fabric. IP-Transit will be configured. SD-Access Transit was not possible (not enough...

Sylvain_Che · 02-27-2023

Hello team, Is it possible to run an IPsec VPN between a traditional router and a cEdge on the service-side VPN? Especially with the following use-case: - the traditional router doesn't have access to the WAN transport, - the traditional router is co...

Sylvain_Che · 02-21-2023

Dear guys, I'm wondering if it is possible to configure an SD-WAN router behind another? I have a use-case I have to connect a small branch to another branch because the small branch doesn't have access to our MPLS cloud. This another branch has conn...

Sylvain_Che · 02-02-2023

Hello folks, The "Bridge-Mode VM" feature is added on DNAC v2.3.3. I would like to know what this feature is exactly used for? In which use-case we should use it? What does DNAC apply to switches? I read on User Guide that this feature has a relation...

Sylvain_Che · 07-21-2023

Hello, @jedolphi answered to a similar question in https://community.cisco.com/t5/software-defined-access-sd-access/sda-replace-fabric-switches-with-different-model/td-p/4886916. It's in the roadmap Regards, Sylvain.

Sylvain_Che · 07-21-2023

Hey, I had a similar problem a few days ago. In the past, I generated a System Certificate using OpenSSL as documented in the Security Best Practices Guide. Sensors were onboarded correctly into DNAC. More recently, I had to change my DNAC certificat...

Sylvain_Che · 06-26-2023

Hi Kevin, Starting with DNAC 2.3.6.x you will be able to define yourself the IP address picked for the Loopback0 interface. Note that 2.3.6.x is not designed to be Generally Available. It is likely you will have to wait 2.3.7.x to use this feature i...

Sylvain_Che · 06-14-2023

Thank you Jerome, helpful as always. It answers my question. Cheers,Sylvain.

Sylvain_Che · 06-14-2023

Both fabric sites have direct connection to the datacenter (ACI fabric). There are some use-cases where we need to enforce TrustSec policies between fabric sites actually. Yes exactly as depicted in the slide, replacing dwdm/metro cloud via ACI.

Member Since	‎09-29-2016 05:42 AM
Date Last Visited	‎09-13-2023 07:08 AM
Posts	76
Total Helpful Votes Received	161

User Statistics

User Activity

Exclude SNMP OIDs from being polled by DNAC

SDA Multisite: carry SGTs via ACI Fabric?

IPsec VPN on LAN-side of a cEdge

SD-WAN router behind another one

Bridge-mode VM

Re: DNA Switch Replacement? Needs to be same model?

Re: Cisco 1800 DNAC PNP not registering

Re: PnP management IP address

Re: SDA Multisite: carry SGTs via ACI Fabric?

Re: SDA Multisite: carry SGTs via ACI Fabric?