Cisco SD-Access

Course Duration: 3-Day ILT

Overview
This 3-day, instructor led course is designed to deliver a deep dive technical workshop to the engineers
on the DNA/SDA Solution and how these solutions can overcome many of the challenges in today's
networks.

Course details
Upon completing this course, the learner will be able to meet these overall objectives:

• Discover SDA/DNA offer solutions

• Demonstrate how to successfully use resources related to SDA/DNA solution
• Discuss competitive positioning

Prerequisites:

To fully benefit from this course, you should have the following knowledge and skills:

• Familiarity with Cisco EN portfolio

• some knowledge of Cisco DNA.

Course Outline

Module 1: Cisco DNA Center

• Network Intuitive- Introduction

• Cisco DNA – Answering the challenge to traditional network
• SD-Access-Introduction
• USPs of Cisco’s DNA-C (Simplicity in Remote site rollout, highly secure, automation and
visualization of data path)
• Cisco DNA-C Platform Architecture, Maglev
• SD-Access Assurance – The Overview

Module 2: Essentials of Network Automation

• Software Defined Access Overviewand Architecture
• SD-Access Fabric constructs
• DNA-C PnP App overview
• DNA-C Easy Qos
• Dynamic QoS Overview
Module 3: Cisco’s SDA Solution

• SD-Access – Deep Dive

• Understanding Campus Fabric
• Concept of Overlay and Underlay
• LISP – Locator/ID Separation Protocol
• LISP Registration Process
• LISP Map Request and Reply
• LISP Mobility
• LISP SMR
• LISP Inter-Switch and Intra-Switch traffic flow inside Campus Fabric
• LISP external connect-Default border and Known border
• VXLAN Deep Dive
• Micro Segmentation - Scalable Group Tags & TrustSec
• Fabric enables Wireless

Module 4: Migration Strategy and Automating Campus Fabric

• Access Migration: - Integrating with the existing network.
• Approaches of Migration: - Parallel VS Migration one switch at a time

NETWORK DESIGN
• DNA Center – Design App
• Network Hierarchy
• Site Profiles and Inheritance
• Network Settings
• ISE Integration
• IP Address Management
• Wireless Site Design and SSID Management
• Wireless Maps

NETWORK PROVISIONING (Underlay)

• Manual Setup
• DNA Center Discovery, Inventory and
• Topology App
• Automated Setup
• DNA Center Design App - Switching Profile

FABRIC PROVISIONING(Overlay)
• DNA Center – Provision App
• Assign Devices to Site
• Auto Populate NADs within ISE
 • Create and Delete Fabric Domains

Cisco NaaS/NaaE – Stealthwatch & ISE

• Cisco Encrypted Traffic Analyzer – Network Intuitive
• Cisco StealthWatch’s in DNA framework
• Cisco ISE as a network enforcer - NaaE
• Cisco StealthWatch as a network sensor - NaaS
• LAB: Isolating Traffic Flows using StealthWatch
• Use Case: Dynamic Threat Prevention with NaaS/NE, ETA

Labs

• Lab1-0: Design a site in DNA-C

• Lab1-2: Provision devices in DNA-C
• Lab1-3: Create contracts in DNA-C
• Lab1-4: Integrate ISE with DNA-C
• Lab2-0: Perform Assurance tests in DNA-C
• Lab2-1: Deploy Stealthwatch management
• console
• Lab2-2: Integrate flow collector, UDP director
• , flow sensor to SMC
• Lab2-3: SMC and ETA alarm run through.