Introduction to Cisco Software Defined Access (SD-Access) («SDAACS»)

• Understanding the concept of SD-Access
• Knowing how SD-Access can be used and which variants are available
• Knowing the elements and functions of SD-Access
• Operating the DNCA centre and configuring the policies for 802.1x on ISE
• Taking the leap from theory to practice

Topics:

1 Introduction to SD-Access / DNA

• What does SD-Access offer?
• Elements of SD-Access
• What changes does the use of SD-Access in the network bring?
• The use of policies to regulate traffic
• Automation / Programmability

2 DNA Center

• Features
• Operation
• Appliance and licenses
• Hands-On DNA Center

3 Managing the network with an SDN controller

• SDN – The model
• Role of the SDN controller
• Communication with the SDN controller

4 The SDA Fabric

• How SDA is structured and the associated protocols such as LISP and VXLAN
• Transition from an SDA network to other networks such as DC, Internet and others

5 ISE

• Role of ISE in the SDA solution
• Policy-based security
• Creating Policies in the DNA Center

6 WLAN

• WLAN in the fabric with Fabric AP and WLC

7 Operation with DNA Center and ISE

• Step-by-step construction of a fabric including WLAN
• Explaining possibilities and variants on the GUI

8 Demonstrating the possibilities around programmability and automation

• What does the DNA Centre offer?
• Explain what a REST API is
• REST API in the DNA Center

Exercises:

• Rolling out the underlay network
• Recording of Switches in the DNA Center
• Configuration of general network parameters in the DNA Centre
• Segmentation of an SDA fabric - Macro segmentation
• Creating contracts for traffic control within a macro segment
• Create policies for network access on the ISE
• Create an SDA fabric and assign Edge and Border
• Assign Virtual Networks VN and the associated IP pools to the fabric
• Add WLAN to the fabric
• Large final lab with a fully functional fabric for wired and wirelss clients
  • In the lab, laptops are connected to the fabric via wire and wireless
  • Configs can be checked on the switches, authentications on the ISE and the switches
  • The lab also offers the possibility to test things and to check the error behaviour, e.g. if a border switch fails

Extensive LAB exercises are conducted on all topics (40% of the course consists of practical exercises).

This course is aimed at network professionals from operations or engineering who are using SDA or are about to introduce it. The course is exciting for network architects because the possibilities of SDA are explained theoretically and can also be tested immediately in the laboratory. This course is also suitable for project managers who can assess the scope of an SDA introduction after the course.

Network knowledge from engineering or operations, at the level of a Cisco Certified Network Associate (CCNA)

Recertification
CEP points

• none
• SDAFND: 18