Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Community Member

Questions about DNA

Hello Community, 

I am new to Digital Network Architecture technology and I have a couple of questions:

  1. What are the protocols that interact between fabric devices / ISE / DNA Center?
  2. Can you run DNA Center on VM?

Thank you for your reply

- John

8 REPLIES
Cisco Employee

Re: Questions about DNA

DNA on VM: yes, runs on VM but NOT YET supported. Planned for later on.

Cisco Employee

Re: Questions about DNA

Between ISE and your fabric devices, cisco trustsec is used

Between ISE and DNA Center, PxGrid is used.

Community Member

Re: Questions about DNA

Hey Alex,

 

I just want to clarify...

 

In traditional ISE deployments (non DNA Center) ISE communicates with network device (NADs) using RADIUS. The TrustSec is how polices are applied.

 

Are Fabric devices not seen as NADs by ISE when DNA Center is used?

 

Allen

Community Member

Re: Questions about DNA

Hi Allen,

 

Each Edge Node in the fabric is seen as  a NAD on ISE.

Regards

Mohammad

Community Member

Re: Questions about DNA

Hello Mohammad,

 

So is it safe to say that in DNA Center implementations the protocol that interacts between fabric devices and ISE is RADIUS and not Cisco Trustsec or are there other considerations?

 

Regards,

Allen

Community Member

Re: Questions about DNA

Yes you  are  right,

ISE sends typical radius messages to the edge switches or WLCs,

The NADs will use the loopback interface to send radius messages, and you will see these entries normally in the ISE. 

No other considerations.

You need to be familier with trustsec and SGTs to apply policies that are not a must.

You can start with simple authorization profiles without using the tustsec.

 

Community Member

Re: Questions about DNA

Thank you Mohammad.

 

Allen

Cisco Employee

Re: Questions about DNA

1-Ans- Trustsec, Pxgrid, NDP, SMNP etc are few protocols which work in DNA center, there are many as well.

2.Ans- As of Now DNA center cannot run as VM for ver 1.1, It might be supported in future versions.

1065
Views
10
Helpful
8
Replies
CreatePlease to create content