Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi all, While executing the lan automation to onboard access switches. On one of the switches i am facing a weird issue which i dont have a clue to why DNAC is doing that.During the lan automation process i am seing the following log message on the s...
Hi all,While performing Lan automation i am receiving the following errors PNP device FOC2332X12B could not be provisioned due to PnP Claim Error: Failed to install image on the device. Perform write-erase and reload on PNP device FOC2332X12B after r...
While working with the template editor on DNAC 2.1.2.x and reading through the documentation I have found information which I believe is incorrect. When you create a configuration template in DNAC you have to specify the template language, after whic...
Hi all, I am reading the QoS chapter from the new ENCOR 350-401 book and I am struggling a bit to understand the precedence of AF classes (if there is any). there is a paragraph on page 373 that says that the AF class number does not represent preced...
Hi,When configuring split tunnel on the ASA an ACL must be configured to filter which subnets will be allowed over the VPN tunnel, this is ok when internal networks are RFC 1918 compliant, however in some cases i have seen companies using public ip a...
Hi, you can configure the port manually, just don't forget to save the conf on the switch and then do a resync on DNA, this will help to maintain the device in compliance. We had to tweak the authentication policy-maps and DNA didn't replace my co...
Hi Zidane, I am not sure, i think the anyconnect-custom-attr must be dynamic-split-include-domains instead of IncludeAzure, this is what is described in the official doc and it was the attribute type i used in my setup. Try and change the attribute ...
Salut ZidaneFrom your attachment i assume that your are missing some configuration for the dynamic split include tunnel to work properly, you do not have specified the internal domains that should go over the tunnel. To specify the domains go to: Onc...
Hi all, After much digging around,and to answer the original Post Dynamic split tunnel Include requires at least 1 IP network or host to be configured under the Group Policy > split tunneling section.There is a very helpful guide here, written in det...
