Skip to Scheduled Dates
Course Overview
Introduction to Cisco SD-Access and Catalyst Center (formerly DNA Center) offer Cisco’s next-generation programmable digital network to help automate common network access security features and streamline the redundant, complex configuration required to allow different groups of users access to the network infrastructure. This 2-day network security training course allows network administrators to quickly allow differentiated access for end users on the network while allowing the network to react automatically to day zero and other types of attacks using integration with Cisco ISE for Policy Enforcement with Cisco Catalyst Center (formerly DNA Center).
The course qualified for 21 Cisco Continuing Education Credits (CE).
Who Should Attend
- Anyone interested in knowing about Catalyst/DNA Center and SD-Access
- Personnel involved in SD-Access Design and Implementation
- Network Operations team with SD-Access solution
- Network admin staff that deal with User Access
- Channel Partner SEs and other sales support
- Network Access Control administration
- Network Administrators
- Network Architects
- Network Engineers
Course Objectives
- Know and understand Cisco’s SD-Access concepts, features, benefits, terminology and the way this approach innovates common administrative tasks on today’s networks.
- Differentiate and explain each of the building blocks of SD-Access Solution
- Explain the concept of “Fabric” and the different node types that conform it (Fabric Edge Nodes, Control Plane Nodes, Border Nodes)
- Describe the role of LISP in Control Plane and VXLAN in Data Plane for SD-Access Solution
- Understand the role of DNA Center as solution orchestrator and Intelligent GUI
- Be familiar with workflow approach in DNA Center and its 4 Steps: Design, Policy, Provision and Assurance
Course Outline
1 - Introduction to Cisco’s Software Defined Access (SD-Access)
- SD-Access Overview
- SD-Access Benefits
- SD-Access Key Concepts
- SD-Access Main Components
2 - SD-Access Campus Fabric
- The concept of Fabric
- Node types
- Fabric Edge Nodes
- Control Plane Nodes
- Border Nodes
- LISP as protocol for Control Plane
- VXLAN as protocol for Data Plane
- Concept of Virtual Network
- Fabric-enabled WLAN
3 - DNA Center and Workflow for SD-Access
- Introduction to DNA Center
- Workflow for SD-Access in DNA Center
- Integration with Cisco ISE for Policy Enforcement
- Integration with Cisco NDP for Analytics and Assurance
- Relationship with APIC-EM controller
4 - DNA Center Workflow First Step - Design
- Creating Enterprise and Sites Hierarchy
- Discuss and Demonstrate General Network Settings
- Loading maps into the GUI
- IP Address Administration
- Administering Software Images
- Network Device Profiles
5 - DNA Center Workflow Second Step - Policy
- 2-level Hierarchy
- Policy Types
- ISE Integration with DNA Center
- Cross Domain Policies
6 - DNA Center Workflow Third Step - Provision
- Devices Onboarding
- Fabric Domains
- Adding Nodes
7 - DNA Center Workflow Fourth Step – Assurance
- Introduction to Analytics
- NDP Fundamentals
- Overview of DNA Assurance
- Components of DNA Assurance
- DNA Center Assurance Dashboard
8 - Implementing WLAN in SD-Access Solution
- WLAN Integration Strategies in SD-Access Fabric
- SD-Access Wireless Architecture
- Sample Design for SD-Access Wireless
9 - Campus Fabric External Connectivity for SD-Access
- Enterprise Sample Topology for SD-Access
- Role of Border Nodes
- Types of Border Nodes
- Single Border vs. Multiple Border Designs
- Collocated Border and Control Plane Nodes
- Distributed (separated) Border and Control Plane Nodes