Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Dear community, does anyone know if it is possible to configure ratelimiting on new incoming TLS connections and renegotiations on Identity Services Engine? Best regards,Johannes
Dear community, why is it necessary to configure the command bgp confederation identifier XXX within a Confederation AS? I understand that the command is necessary in eBGP peerings, but within an AS I could not find a package that transmits this valu...
Dear community, we are currently building a small SD-Access Fabric. Afterwards we tried to integrate an infoblox as IP address manager. When I try to apply the configuration under System Settings -> Settings -> IP Address Manager I get the failure co...
Dear community, we are currently planning the implementation of SDA as a counterpart to our ACI Fabric. Right now we are asking ourselves the question where we can place the DNA Center and ISE? Would you place the appliance inside or outside the ACI ...
Dear Community, I am currently planning a new ISE deployment. For the sizing the number of transactions per second for tacacs is important.Probably most transactions are caused by the DNA Center. Per switch I have about 100 commands, which are issued...
Hi Harold, thank you very much for your answer. Is there any use case scenario where configuring the bgp confederation id within a sub AS is necessary if the router is not connected to another AS? My understanding is that only routers that peer with ...
I agree. You have to evaluate the requirements and then decide whether you need a cluster at all. I think you can also connect different sites if the RTT is low (e.g. via DWDM routes) and you can span L2.
Hi Balaji, this is documented at Cisco DNA Center High Availability Guide, Release 2.1.2 - Cisco Frist of all it is a requirement that all DNA Center Appliances must be on the same site and network.:Multinode cluster deployments require all of the me...
Hi Balaji, I don't understand the benefit of spreading the DNAC appliances across multiple sites when at least two should be associated with a site.Assuming the site with two appliances would fail, according to the quorum principle it would mean that...
