Hi,in this document , it says that in case of External+Internal border where BGP is imported into LISP and LISP is redistributed back into BGP, tags are needed to prevent iBGP to LISP route imports and hence avoid potential loops.Can someone, please,...
-
-
-
-
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community
-
Forum Posts
Resolved! Fusion Firewall with Intermediate L3 Hop
We are deploying the similar design as shown in the attached picture ( source: Cisco Live) where we have Nexus vPC switch as L3 hop between Border and Firewalls.BGP sessions will be established directly between:Border Nodes and NexusNexus & Firewalls...
Trying to deploy VNs to the fabric devices, but when I reach the preview configuration step, it shows "no devices found." The VN has already been created and assigned under the fabric site.Some quick checkupFabric devices (Border Nodes, Control Plane...
Hi, I have a working location with single 9300X working as FIB - i.e. it runs edge, contorl, border and also embedded WLC functionality. The fabric is working good. But now I need to change the Loopback0 IP address (due to global network renumbering)...
Hi Cisco Community We have used some C3560CX as office extenders and now want to activate SGT. Unfortunately this does not work and we do not yet understand the reasons. A new C9200CX works perfectly. There are contradictory announcements and ma...
Hi All, Hope you’re doing well! Just one small question – if MACsec support is on the roadmap for SD-Access? Or there are no plans to support it at all? Any input would be very welcome
Hi AllI m working on setting up PXE boot for SCCM device builds over the network . We are using an SDA network where I have configured IP helper on the SVI the endpoints are connected to . This is the configuration on the Fabric Edge node SDA-EDGE-...
Hello, I have a physical Cisco DNAC appliance, and I’ve set up EVE-NG on ESXi to practice SD-Access. I’m a bit confused about which Cisco switch IOS images are compatible with EVE-NG for SD-Access lab simulations. I want to ensure I use the right ima...
We’re working on a greenfield deployment of Cisco SD-Access. We have two Catalyst 9600R switches designated as BN/CP, which we’re setting up as individual devices. Many recommended avoid using VSS or SVL due to downtime during maintenance windows Eac...
Hi Can I check for small SDA sites design, can we directly connect DHCP/DNS server to the Border Node?
Hi,We have a requirement where we need to route single VRF (SSOL_Vrf) Traffic in SDA Fabric. Currently all vrf traffic is being forwarded based on default route, as a new requirement we need to forward it to new firewall being a part of SDA Fabric.S...
HiI have a requirement to move every device from one subnet/address pool and disperse the clients around other ones. My problem is I don't know how many ports are assigned to a particular address pool across my fabric. I can find active devices eas...
Hi,Campus LAN with a pair of CP/BN (for the entire campus) and Single fabric site.Building A & B with Dist switches (Intermediate nodes) and Fabric Edge (FE) nodes.Building C with only fabric edge nodesLAN Automation will be building by building - fi...
Resolved! SD-Access Intermediate Node
We are doing a SDA deployment with the following design2x Cat 9600 border nodes BN/CP2x 9500 Fusion Switches2x Cat 9500 intermediate nodes configured in VSS ( Building A)2x Cat 9500 intermediate nodes configured in VSS ( Building B)50+ Fabric edge no...
Hey everyone,We’re setting up Cisco SD-Access for a regulated HIPAA compliant environment and need some advice on VRF segmentation and security setup.We're using a firewall as the fusion device. Same firewall controls access to data center servers (e...
