Cisco DNA-C Getting Started Implementation Readiness

Cisco DNA Center: Getting Started &
Implementation Readiness
Customer Experience Accelerator
Mahmoud Fayek
Customer Success Specialist (CSS)
What you’ll learn today to help you
on your Cisco DNA journey
Get information
software upgrades +
Discovery
Learn how to use
Install Wizard
Find out installation

best practices
Learn about
interface cabling
and addressing
Get tips to plan your
Cisco DNA Center
installation
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco DNA Center: Compatibility Matrix
Device Type Device Family Recommended Min. Supported
Software Version Software Version
Switch CAT2K IOS 15.2(2)E8 IOS 15.2(2)E3
Switch CAT3K IOS-XE 16.6.1 IOS-XE 3.6.5E
Switch CAT4K IOS-XE 3.10E IOS-XE 3.6.5E
Switch CAT6K IOS 15.5.1 SY IOS 15.5.1 SY
Switch CAT9K IOS-XE 16.6.3 IOS-XE 16.6.2
IOT Switch IE 2K IOS 15.2(6)E1 IOS 15.2(6)E1
IOT Switch IE 3K (IOS) IOS 15.2(6)E1 IOS 15.2(6)E1
IOT Switch IE 3K (IOS-XE) IOS-XE 16.11.1s IOS-XE 16.10.1e
IOT Switch IE 4K IOS 15.2(7)E0s IOS 15.2(6)E1
IOT Switch IE 5K IOS 15.2(7)E0s IOS 15.2(6)E1
More Information:
DC Switch N7K NX-OS 7.3.2 NX-OS 7.3.1
https://www.cisco.com/c/en/u
Router ASR 1K IOS-XE 16.3.5 IOS-XE 16.3.1
s/support/cloud-systems-
Router ISR 11XX IOS-XE 16.7.1 IOS-XE 16.6.1
management/dna-
Router ISR 4K IOS-XE 16.6.3 IOS-XE 3.16 center/products-device-
IOT Router IR1101 IOS-XE 16.10.1e IOS-XE 16.10.1e support-tables-list.html
IOT Router IR829 IOS 15.8(3)M1 IOS 15.7(3)M2
Wireless AP (11ax) AireOS 8.9 AireOS 8.9
Wireless AP (11ax) IOS-XE 16.11.1e IOS-XE 16.11.1e
Wireless AP (11n) AireOS 8.5.130 AireOS 8.5.120
Wireless AP (Outdoor) AireOS 8.5.130 AireOS 8.5.120
Wireless AP (Wave1) AireOS 8.5.130, 8.7.106 AireOS 8.5.120
Wireless AP (Wave2) AireOS 8.5.130, 8.7.106 AireOS 8.5.120
Wireless Controller
AireOS 8.5.130, 8.7.106 AireOS 8.5.120
Virtual Varies Varies Varies
Interface Cable Connections
mandatory
optional
Cisco DNA Center Appliance Connections
Physical Interfaces & Connections
DN2-HW-APL
PORT 1 PORT 2 1 2 M
or
PCIe SFP+ 10Gb PCIe SFP+ 10Gb (Integrated) RJ-45 1Gb (Integrated) RJ-45 1Gb (Integrated) RJ-45 Gb
DN2-HW-APL-L
Wizard Name enp94s0f0 enp94s0f1 eno1 eno2 -
Optional dedicated Optional cloud network port

Enterprise network Intra-cluster CIMC out-of-band server
Use management network for for separate Internet
infrastructure communications appliance management
web access connectivity
Example cluster 10.4.48.151 10.4.49.151

- - -
VIP address 255.255.255.0 255.255.255.0
Example interface 10.4.48.150 10.4.49.150 100.119.103.235

Unused in this example Unused in this example
address (Node 1) 255.255.255.0 255.255.255.0 255.255.255.0
• NTP, DNS is required INFO: From 2.1.1.x the system now uses the 169.x.x.x address spaces for inter-cluster communications.
Single Node Cluster (DN2 appliance)
Interfaces &
Cabling
Starting DNAC
Before you start the installation 2.2.2
Applicable IF NIC
Bonding is enabled
DN2-HW-APL
and
DN2-HW-APL-L
enp94s0f0 / eno2 /
enp216s0f2 enp216s0f1
enp94s0f1 /
enp216s0f3
eno1 /
enp216s0f0
9
Starting DNAC
Before you start the installation 2.2.2
Applicable IF NIC
Bonding is enabled
DN2-HW-APL-XL
10
Before you start the installation
O Enterprise Port – Interface that is connected to the Enterprise network
• Virtual IP
• Each VIP should be from the same subnet as the IP address of the corresponding configured interface
O Intracluster Port – isolated network used for communication between the Cisco DNA Center
cluster nodes
• Virtual IP
• Container/Service Subnet - dedicated IP subnet for the communications among its internal application services, such as
Assurance, inventory collection, etc. By default, Cisco DNA Center configures a link-local subnet (169.254.32.0/20) for this
parameter – Recommended to use!
• Cluster subnet - dedicated IP subnet for the communications among its infrastructure services, such as database access, the
message bus, etc. By default, Cisco DNA Center configures a link-local subnet (169.254.48.0/20) for this parameter –
Recommended to use!
• If you however want to use some other subnet address pool – min. /21 subnet for each (recommended /20-/16). Must
conform with the IETF RFC 1918 or 6598
• The Cluster/Service subnet address pools can not be changed after installation and no other machines should be in this
network
12
Before you start the installation
O CIMC Port– Management of the Cisco DNAC Appliance hardware (optional, but highly
recommended)
O Management Port– used for Cisco DNA Center management (optional)
• Virtual IP
• This port provides access to the Cisco DNA Center GUI, allowing users to use the software on the appliance.
O Internet/Cloud Port – used to update the Cisco DNA Center software (optional)
• Virtual IP
• Use it only if you cannot connect the appliance to the Internet (including to your Internet proxy server) using the Enterprise
Port (Network Adapter 1). If you need to use this port, connect it to a switch with connections to your Internet proxy server
and configure one IP address with a subnet mask for the port.
Additional Settings needed

• DNS Server IP Address (1 required, 2+ recommended)
• NTP Server IP Address (1 required, 2+ recommended)
• Optional Proxy Server IP Address (required if direct internet access is not available)
13
Installation Template - EXAMPLE
Appliance #1 IP Appliance #2 IP Appliance #3 IP
Intra-Cluster IP: 172.25.216.12/24 Intra-Cluster IP: 172.25.216.13/24 Intra-Cluster IP: 172.25.216.14/24
Intra-cluster VIP: 172.25.216.11/24 Intra-cluster VIP: 172.25.216.11/24 Intra-cluster VIP: 172.25.216.11/24
Management (CIMC) IP: 172.24.250.71 Management (CIMC) IP: 172.24.250.72 Management (CIMC) IP: 172.24.250.73
DNAC Admin IP: 172.25.217.12/24 DNAC Admin IP: 172.25.217.13/24 DNAC Admin IP: 172.25.217.14/24
DNAC Admin VIP: 172.25.217.11/24 DNAC Admin VIP: 172.25.217.11/24 DNAC Admin VIP: 172.25.217.11/24
Cloud IP: NA Cloud IP: NA Cloud IP: NA
Cloud VIP: NA Cloud VIP: NA Cloud VIP: NA
Enterprise IP: 172.25.218.12/24 Enterprise IP: 172.25.218.13/24 Enterprise IP: 172.25.218.14/24
Enterprise VIP: 172.25.218.11/24 Enterprise VIP: 172.25.218.11/24 Enterprise VIP: 172.25.218.11/24
Default Gateway IP: 172.25.218.1/24 Default Gateway IP: 172.25.218.1/24 Default Gateway IP: 172.25.218.1/24
Hostname BestDNAC-1 Hostname BestDNAC-2 Hostname BestDNAC-3

DNS #1 IP: 172.16.222.21 DNS #1 IP: 172.16.222.21 DNS #1 IP: 172.16.222.21
172.25.217.0/24 - 172.25.217.0/24 - 172.25.217.0/24 -
Static Route #1 IP: Static Route #1 IP: Static Route #1 IP:
172.25.217.1 172.25.217.1 172.25.217.1
Static Route #2 IP: NA Static Route #2 IP: NA Static Route #2 IP: NA
NTP #1 IP: 172.16.128.1 NTP #1 IP: 172.16.128.1 NTP #1 IP: 172.16.128.1
NTP #3 IP: NTP #3 IP: NTP #3 IP:
Proxy: Proxy: Proxy:
Proxy username/password: Proxy username/password: Proxy username/password:
Linux/Maglev password: M$glev1@3 Linux/Maglev password: M$glev1@3 Linux/Maglev password: M$glev1@3

Admin Password Tempassword123
Admin Password Tempassword123 Admin Password Tempassword123
15

172.25.217.0/24 - 172.25.217.0/24 - 172.25.217.0/24 -
172.25.217.1 172.25.217.1 172.25.217.1
NTP #1 IP: • Enterprise and Cluster
172.16.128.1 interfaces
NTP #1 IP: are required172.16.128.1
NTP #1 IP: 172.16.128.1
NTP #2 IP: 172.16.128.2 NTP #2 IP: 172.16.128.2
NTP #2 IP: 172.16.128.2
NTP #3 IP:
• CIMC is strongly recommended
NTP #3 IP: NTP #3 IP:
Proxy: • Cluster IP is the only IP address that can’t be changed afterProxy:
Proxy: installation

16
Subscribe to Event Notifications (CIMC)

172.25.217.0/24 - 172.25.217.0/24 - 172.25.217.0/24 -
172.25.217.1 172.25.217.1 172.25.217.1
• DNAC used to require two unique /21 subnets, not shared with Network, for
inter-cluster communications
• From 2.1.1.x this requirement is removed, and the two /21 are not required.
Proxy:
Proxy username/password:
Proxy:
Proxy:
System now uses the 169.x.x.x address spaces within the cluster.
18
Management (CIMC) IP: 172.24.250.71 The system can have a single default gateway
Management (CIMC) IP: 172.24.250.72 Management (CIMC) IP: 172.24.250.73
DNAC Admin IP: 172.25.217.12/24 ForIP:other interfaces,

DNAC Admin 172.25.217.13/24 static routes and
DNAC Admin IP: required
172.25.217.14/24

172.25.217.0/24 - 172.25.217.0/24 - 172.25.217.0/24 -
172.25.217.1 172.25.217.1 172.25.217.1

19
DNAC Admin IP:

DNAC Admin VIP:
• NTP, DNS and proxy must
172.25.217.12/24
172.25.217.11/24
be reachable
DNAC Admin IP:
DNAC Admin VIP:
from IP addresses
172.25.217.13/24
172.25.217.11/24
used for DNAC,
DNAC Admin IP:
DNAC Admin VIP:
172.25.217.14/24
172.25.217.11/24
Cloud IP:
Cloud VIP:
check NAfirewall rules Cloud VIP:
NA Cloud IP: NA
NA
Cloud IP:
Cloud VIP:
NA
NA
Enterprise IP:
Enterprise VIP:
• Prepare for Internet access
172.25.218.12/24
172.25.218.11/24
for required
Enterprise IP:
Enterprise VIP:
resources
172.25.218.13/24
172.25.218.11/24
Enterprise IP:
Enterprise VIP:
172.25.218.14/24
172.25.218.11/24

172.25.217.0/24 - 172.25.217.0/24 - 172.25.217.0/24 -
172.25.217.1 172.25.217.1 172.25.217.1

20
Single and multi-node information
Continued
Download updates to Cisco DNA https://www.ciscoconnectdna.com
Center's system and application https://cdn.ciscoconnectdna.com
package software, submit user https://registry.ciscoconnectdna.com
Cisco DNA feedback to the Cisco DNA Center https://registry-cdn.ciscoconnectdna.com
Center requires product team
reachability to Integrate with Cisco Meraki dashboard.meraki.com:443
Internal URLs & api.meraki.com:443
FQDNs n63.meraki.com:443
Integrate with Cisco.com and Cisco *.cisco.com:443
Smart Licensing
Render accurate information in Cisco www.mapbox.com
DNA Center's site and location maps *.tiles.mapbox.com/* :443
For a proxy, the destination is
*.tiles.mapbox.com/*
Informational
Internal Connectivity Requirements
§ Ensure that these ports are open for traffic

flows to and from the appliances.
§ Additional ports, protocols, and types of

traffic must be accommodated if you are
deploying the appliance in a network that
employs SDA infrastructure.
Detailed List of all of the Ports needed can be found here:

http://cs.co/DNAC_Communication_Ports
22
Installation Template – FOR YOU

172.25.217.0/24 - 172.25.217.0/24 - 172.25.217.0/24 -
172.25.217.1 172.25.217.1 172.25.217.1

23
Simplify and add flexibility with Cisco Smart Software
Licensing
Manage your license deployments in a way Get visibility and security with Smart Accounts
that is:
• Smart Software Manager: visibility to assets via
• Simple: Procure, deploy, and manage licenses easily easy-to-use interface
• Flexible: Move licenses freely through the network, • Smart Account Manager satellite: extra security for
wherever you need them customers who do not want to manage installed
base using direct Internet connection
• Smart: Have real-time visibility of ownership and
consumption
Learn more: https://www.cisco.com/c/en/us/products/software/smart-accounts/software-licensing.html
Installation
All versions
Installation - Let’s get started!
• Cluster installation only (new / join)
• Straight forward but takes a little bit
26
All versions
Installation - Let’s get started!
Option 1 Option 2
Maglev Wizard Browser-Based Wizard
27
DNAC 2.1.2
Installation – Option 1 – Maglev Wizard and earlier
Startup Screen Enterprise NIC Setup InterCluster NIC Setup Mgmt. NIC Setup DMZ NIC Setup
NTP and Cluster Verifications Cluster Settings Cluster Settings Proxy Settings Host networking verification
Commit for Install 29

All versions
Cisco DNA Center Second/ Third Node Install
§ Setting up the 2nd and 3rd node in the cluster
§ Click on ‘Join a DNA-C Cluster’
§ Same process as first node to bring up all the interfaces,

proxy, NTP, DNS Servers etc.
§ Enter the Maglev Cluster Details for primary node.
§ The second node verifies connectivity to the master node
§ If connectivity is there, it then registers with the first node.
30
DNAC 2.1.2
Installation – Option 2 and earlier
Browser-Based Wizard
31
DNAC 2.1.2
32
DNAC 2.1.2
33
All versions
Cisco DNA Center Install with USB
§ Download image to local drive
§ Then burn the ISO image to USB (45 mins) using the
Etcher tool
§ Start a DNA cluster/Join a cluster ( 3-4 hrs.)
Download DNAC Software for 2.1.2 here:

https://software.cisco.com/download/home/286316341/type/286318832/release/2.1.2.6?catid=2
68439477
34
Upgrades and
patches
Verify current software version
Cisco
CiscoDNA
DNA
Center
Center
Upgrades &
Single
Patches
Node
Cluster
Step #1
Proxy setting to reach the update catalog
Cisco
CiscoDNA
DNA
Center 1
Center 3
Upgrades &
Single
Patches
Node 2
Cluster
Step #2
4
Update software
Cisco
CiscoDNA
DNA 1
Center
Center
Upgrades &
Single
Patches
Node
Cluster
Step #3
Post-update: Verify current software version
Cisco
CiscoDNA
DNA
Center
Center
Upgrades &
Single
Patches
Node
Cluster
Step #4
Configuration
Locations
Sites,Center
DNA
Single Node
Buildings, &
Cluster
Floors
Shared services
Switch1#show run | inc domain name
ip domain name dna2.local
1
DNA Center Switch1#show run | inc name-server
Services 2
ip name-server 192.168.102.199
Single Node
(Global) Switch1#show run | inc logging host
Cluster 3
logging host 192.168.100.220
Switch1#show run | inc ntp

ntp server 192.168.102.199
Configuration by Site
1
DNA Center
Services
Single Node 2
(Per Site)
Cluster
3
Device discovery
Cisco DNA Center: Device discovery checklist
Cisco DNA Center appliance configured with management and network-facing

DNA Center
Discovery network connections.
Single Node
Checklist
Cluster Proxy configured and Cisco DNA Center software updated.
Sites, buildings, and floors configured.
Network device shared services parameters in place as needed.
Network device credentials configured in Cisco DNA Center.
Add credentials
1
DNA Center 2
Device
Single Node
Credentials 3
Cluster
Can Cisco DNA Center talk to ISE and IPAM?
1
DNA Center
Ready for
Single Node
Discovery 2
Cluster
Setting up discovery tasks
Initiate
DNA Center
Single Node
Discovery
Cluster
Task #1
Setting up discovery tasks
Continued
Initiate
DNA Center
Single Node
Discovery
Cluster
Task #2
Tracking discovery progress
DNA Center
Discovery
Single Node
Progress
Cluster
Assigning devices
Start here on the

Add
DNA Center main menu.
Discovered
Single Node
Devices to
Cluster
Site
1 3
Questions
Continue the
conversation in our Cisco
DNA community:
http://cs.co/dnac-community
Cisco DNA Center User Guide (Release
1.3)
Cisco DNA Center User Guide (Release
1.2.10)
References Enterprise Mobility Design Guide
Cisco DNA Services
• Services for Enterprise Networks
• Cisco Services eBook

• Cisco DNA Center Advise and
Implement Service

Cisco DNA-C Getting Started Implementation Readiness

Uploaded by

Copyright:

Available Formats

You might also like

Cisco DNA-C Getting Started Implementation Readiness

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Cisco DNA-C Getting Started Implementation Readiness

Uploaded by

Copyright:

Available Formats

Cisco DNA Center: Getting Started &

Customer Experience Accelerator

Find out installation

Optional dedicated Optional cloud network port

Example cluster 10.4.48.151 10.4.49.151

Example interface 10.4.48.150 10.4.49.150 100.119.103.235

Additional Settings needed

Hostname BestDNAC-1 Hostname BestDNAC-2 Hostname BestDNAC-3

Linux/Maglev password: M$glev1@3 Linux/Maglev password: M$glev1@3 Linux/Maglev password: M$glev1@3

Hostname BestDNAC-1 Hostname BestDNAC-2 Hostname BestDNAC-3

Linux/Maglev password: M$glev1@3 Linux/Maglev password: M$glev1@3 Linux/Maglev password: M$glev1@3

Hostname BestDNAC-1 Hostname BestDNAC-2 Hostname BestDNAC-3

DNAC Admin IP: 172.25.217.12/24 ForIP:other interfaces,

Hostname BestDNAC-1 Hostname BestDNAC-2 Hostname BestDNAC-3

Linux/Maglev password: M$glev1@3 Linux/Maglev password: M$glev1@3 Linux/Maglev password: M$glev1@3

DNAC Admin IP:

Hostname BestDNAC-1 Hostname BestDNAC-2 Hostname BestDNAC-3

Linux/Maglev password: M$glev1@3 Linux/Maglev password: M$glev1@3 Linux/Maglev password: M$glev1@3

§ Ensure that these ports are open for traffic

§ Additional ports, protocols, and types of

Detailed List of all of the Ports needed can be found here:

Hostname BestDNAC-1 Hostname BestDNAC-2 Hostname BestDNAC-3

Linux/Maglev password: M$glev1@3 Linux/Maglev password: M$glev1@3 Linux/Maglev password: M$glev1@3

Learn more: https://www.cisco.com/c/en/us/products/software/smart-accounts/software-licensing.html

• Cluster installation only (new / join)

• Straight forward but takes a little bit

Commit for Install 29

§ Setting up the 2nd and 3rd node in the cluster

§ Click on ‘Join a DNA-C Cluster’

§ Same process as first node to bring up all the interfaces,

§ The second node verifies connectivity to the master node

§ If connectivity is there, it then registers with the first node.

§ Download image to local drive

§ Start a DNA cluster/Join a cluster ( 3-4 hrs.)

Download DNAC Software for 2.1.2 here:

Switch1#show run | inc ntp

Cisco DNA Center appliance configured with management and network-facing

Sites, buildings, and floors configured.

Network device shared services parameters in place as needed.

Network device credentials configured in Cisco DNA Center.

Start here on the

• Cisco Services eBook

You might also like