Cisco Software-Defined Access (Networking Technology)

✍ Scribed by Srilatha Vemula, Jason Gooley, Roddie Hasan

• Publisher: Cisco Press
• Year: 2020
• Tongue: English
• Leaves: 828
• Edition: 1
• Category: Library

✦ Synopsis

The definitive Cisco SD-Access resource, from the architects who train Cisco’s own engineers and partners

This comprehensive book guides you through all aspects of planning, implementing, and operating Cisco Software-Defined Access (SD-Access). Through practical use cases, you’ll learn how to use intent-based networking, Cisco ISE, and Cisco DNA Center to improve any campus network’s security and simplify its management.

Drawing on their unsurpassed experience architecting solutions and training technical professionals inside and outside Cisco, the authors explain when and where to leverage Cisco SD-Access instead of a traditional legacy design. They illuminate the fundamental building blocks of a modern campus fabric architecture, show how to design a software-defined campus that delivers the most value in your environment, and introduce best practices for administration, support, and troubleshooting.

Case studies show how to use Cisco SD-Access to address secure segmentation, plug and play, software image management (SWIM), host mobility, and more. The authors also present full chapters on advanced Cisco SD-Access and Cisco DNA Center topics, plus detailed coverage of Cisco DNA monitoring and analytics.

• Learn how Cisco SD-Access addresses key drivers for network change, including automation and security
• Explore how Cisco DNA Center improves network planning, deployment, evolution, and agility
• Master Cisco SD-Access essentials: design, components, best practices, and fabric construction
• Integrate Cisco DNA Center and Cisco ISE, and smoothly onboard diverse endpoints
• Efficiently operate Cisco SD-Access and troubleshoot common fabric problems, step by step
• Master advanced topics, including multicast flows, Layer 2 flooding, and the integration of IoT devices
• Extend campus network policies to WANs and data center networks
• Choose the right deployment options for Cisco DNA Center in your environment
• Master Cisco DNA Assurance analytics and tests for optimizing the health of clients, network devices, and applications

✦ Table of Contents

Title Page
Copyright Page
About the Author(s)
About the Technical Reviewers
Dedications
Acknowledgments
Contents at a Glance
Reader Services
Contents
Icons Used in This Book
Command Syntax Conventions
Introduction
Goals and Methods
Who Should Read This Book?
How This book Is Organized
Book Structure
Chapter 1. Today’s Networks and the Drivers for Change
Networks of Today
Common Business and IT Trends
Common Desired Benefits
High-Level Design Considerations
Cisco Digital Network Architecture
Past Solutions to Today’s Problems
Introduction to Multidomain
Summary
Chapter 2. Introduction to Cisco Software-Defined Access
Challenges with Today’s Networks
Software-Defined Networking
Cisco Software-Defined Access
Network Access Control
Introduction to Cisco Identity Services Engine
Cisco ISE Design Considerations
Segmentation with Cisco TrustSec
Summary
Chapter 3. Introduction to Cisco DNA Center
Network Planning and Deployment Trends
History of Automation Tools
Cisco DNA Center Overview
Design and Visualization of the Network
Network Discovery and Inventory
Device Configuration and Provisioning
Summary
Chapter 4. Cisco Software-Defined Access Fundamentals
Network Topologies
Cisco Software-Defined Access Underlay
Wireless LAN Controllers and Access Points in Cisco Software-Defined Access
Shared Services
Transit Networks
Fabric Creation
Fabric Device Roles
Host Onboarding
Summary
References in This Chapter
Chapter 5. Cisco Identity Services Engine with Cisco DNA Center
Policy Management in Cisco DNA Center with Cisco ISE
Group-Based Access Control
Segmentation with Third-Party RADIUS Server
Secure Host Onboarding in Enterprise Networks
802.1X Phased Deployment
Host Onboarding with Cisco DNA Center
Security in Cisco Software-Defined Access Network
Policy Set Overview in Cisco ISE
Segmentation Policy Construction in Cisco SD-Access
Segmentation Outside the Fabric
Summary
References in This Chapter
Chapter 6. Cisco Software-Defined Access Operation and Troubleshooting
Cisco SD-Access Under the Covers
Host Operation and Packet Flow in Cisco SD-Access
Cisco SD-Access Troubleshooting
Authentication/Policy Troubleshooting
Summary
References in This Chapter
Chapter 7. Advanced Cisco Software-Defined Access Topics
Cisco Software-Defined Access Extension to IoT
Multicast in Cisco SD-Access
Multicast Flows in Cisco SD-Access
Layer 2 Flooding in Cisco SD-Access
Layer 2 Border in Cisco SD-Access
Cisco SD-Access for Distributed Campus Deployments
Cisco SD-Access Design Considerations
Cisco SD-Access Policy Extension to Cisco ACI
Summary
References in This Chapter
Chapter 8. Advanced Cisco DNA Center
Cisco DNA Center Architecture and Connectivity
Software Image Management
Cisco DNA Center Templates
Plug and Play
Claiming a Device
Cisco DNA Center Tools
Summary
References in This Chapter
Chapter 9. Cisco DNA Assurance
Assurance Benefits
Cisco DNA Assurance Architecture
Cisco DNA Assurance Tools
Summary
References in This Chapter
Glossary