SD-Access is Cisco’s Next Generation campus networking solution that simplifies management, automation, and improves security implications.
Who (People), what (Devices), when (Time) and where (Location) are questions we would like answered when working with users and devices! These questions are answered within a single pane of glass known as the Cisco Identity Services Engine (ISE). Once users and devices are identified we often segment these groups for management purposes. Cisco's Digital Networks Architecture Center (DNAC) is a means of configuring and maintaining that segmentation using software defined access. DNA Center is not limited to configuration changes. DNA Center also provides a policy-based approach to services that support the network such as NTP, DNS, DHCP. In this course, you integrate ISE and DNAC which gives you the ability to manage physical devices, logical segmentation, IP, transport rules as well as Authentication, Authorization and Accounting (AAA) of users and devices along with an overview and introduction to SD-Access and DNA Center.
Student Testimonials
Instructor did a great job, from experience this subject can be a bit dry to teach but he was able to keep it very engaging and made it much easier to focus.
Student
Excellent presentation skills, subject matter knowledge, and command of the environment.
Student
Instructor was outstanding. Knowledgeable, presented well, and class timing was perfect.
Student
Click here to print this page »
Prerequisites
The knowledge and skills that a learner should have before attending this course are as follows:
Knowledge level equivalent to Cisco CCNA Routing & Switching
Basic knowledge of Software Defined Networks
Basic knowledge of network security including AAA, Access Control and ISE
Basic knowledge and experience with Cisco IOS, IOS XE and CLI
Detailed Class Syllabus
Module 1: Cisco ISE Integration for SD Access
Introduction to Cisco ISE
Using Cisco ISE as a Network Access Policy Engine
Introducing Cisco ISE Deployment Models
Introducing 802.1x and MAB Access: Wired and Wireless
Introducing Identity Management
Configuring Certificate Service
Introducing Cisco ISE Policy
Configuring Cisco ISE Policy Sets
Introduction to Cisco TrustSec for segmentation
The Concept of Security Group (SG) and Security Group Tag (SGT)
Cisco TrustSec Phases
Classification
Propagation
Enforcement
Methods for Classification
Static Classification
Dynamic Classification
Methods for SGT tag propagation
Inline Tagging
SGT Exchange Protocol (SXP)
Module 2: Introduction to Cisco’s Software Defined Access (SD-Access)
SD-Access Overview
SD-Access Benefits
SD-Access Key Concepts
SD-Access Main Components
Campus Fabric
Wired
Wireless
Nodes
Edge
Border
Control Plane
DNA Controller (APIC-EM Controller)
Introducing Cisco ISE 2.x px
2-level Hierarchy
Macro Level: Virtual Network (VN)
Micro Level: Scalable Group (SG)
Module 3: DNA Center Workflow
DNA Center Refresher
Creating Enterprise and Sites Hierarchy
Configuring General Network Settings
Loading maps into the GUI
IP Address Management
Software Image Management
Network Device Profiles
Introduction to Analytics
NDP Fundamentals
Overview of DNA Assurance
Module 4: SD-Access Campus Fabric
The concept of Fabric
Node types (Breakdown)
LISP as protocol for Control Plane
VXLAN as protocol for Data Plane
Module 5: Campus Fabric External Connectivity for SD-Access
Enterprise Sample Topology for SD-Access
Role of Border Nodes
Types of Border Nodes
Border
Default Border
Single Border vs. Multiple Border Designs
Collocated Border and Control Plane Nodes
Distributed (separated) Border and Control Plane Nodes
Module 6: Implementing WLAN in SD-Access Solution
WLAN Integration Strategies in SD-Access Fabric
Fabric CUWN
SD-Access Wireless (Fabric enabled WLC and AP)
SD-Access Wireless Architecture
Control Plane: LISP and WLC
Data Plane: VXLAN
Policy Plane and Segmentation: VN and SGT
Sample Design for SD-Access Wireless