Cisco SD-Access Building the Routed Underlay

Cisco SD-Access Building the Routed Underlay Rahul Kachalia Sr. Technical Leader

Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot# 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

Cisco s Intent-based Networking Learning DNA Center The Network. Intuitive. Policy Automation Analytics Powered by Intent. Informed by Context. Intent Context Network Infrastructure Switching Routers Wireless Security 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 4

Software-Defined Access Networking at the Speed of Software! Policy Automation DNA Center Analytics Identity-based Policy & Segmentation Decoupled security policy definition from VLAN and IP Address Automated Network Fabric Single Fabric for Wired & Wireless with Workflow-based Automation SDA-Extension User Mobility Policy stays with user Insights & Telemetry Analytics and insights into user and application behavior IoT Network Employee Network 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 5

Software Defined Access Cisco Live Barcelona - Session Map Missed One? Sessions are available online @ CiscoLive.com You Are Here Tuesday (Jan 30) Wednesday (Jan 31) Thursday (Feb 01) Friday (Feb 02) 08:00-11:00 11:00-13:00 13:00-15:00 15:00-18:00 08:00-11:00 11:00-13:00 13:00-15:00 15:00-18:00 08:00-11:00 11:00-13:00 13:00-15:00 15:00-18:00 08:00-11:00 11:00-13:00 13:00-15:00 15:00-18:00 BRKEWN-2021 SDA Wireless Setup BRKEWN-2020 Wireless Overview BRKDCN-2489 DC Integration BRKCRS-3811 Policy Management BRKCRS-2810 Solution Overview Routed Underlay BRKCRS-2814 Assurance BRKCRS-2811 External Connect BRKCRS-2815 & Scale BRKCRS-2812 Migration LTRCRS-2810 (1) Hands-On Lab LTRCRS-2810 (2) Hands-On Lab 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

Agenda 1 2 3 4 5 Underlay Automation Overview What is Underlay Automation? Network ning What design and planning required? Underlay Network How to design and build sites? Underlay Network ing How discover device and complete automation? Take-Away Next Step for Overlay Automation

Underlay Automation Software Defined Access Session Overview and Objectives What this session will cover: This session introduces the zero-configuration Underlay Automation to enable new SD- Access solution. The simplified procedure builds the solid error-free underlay network foundation to seamlessly start building an SD-Access overlay networks. This session divides in four simple steps to successfully complete step-by-step Underlay Automation. This Underlay Automation capability helps accelerating building SD-Access overlay networks without traditional network planning and implementation process. Objectives of this session: The audience will understand the overall Underlay Automation solution, and the parts that work together to create the solution. The audience should be able to follow describe procedure for their Day-0 or Day-2 network automation. 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 8

Underlay Automation Overview What is Underlay Automation?

What is Underlay Network? Traditional Networks Core Core Dist Access Traditional LAN and WLAN network infrastructure and designs Variable network size Three-Tier or Collapsed models Traditional network designs Multilayer or Routed Access providing reachability 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 10

What is Underlay Automation Automating Traditional Networks Core Core Dist Access Ease of new LAN network deployments for Campus or Branch networks Complete network automation to accelerate building SDA overlay networks Flexible software design to on-board new switch during network expansion 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 11

Underlay Automation Overview Simplified Procedure Verify Network Verify System support Prepare IP Services Sites across geographic Global network services IP Address Pools 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 12

Underlay Automation Overview Simplified Procedure Verify Network Verify System support Prepare IP Services Sites across geographic Global network services IP Address Pools Network devices Physical Topology Network Readiness 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 12

Underlay Automation Overview Simplified Procedure Verify Network Sites across geographic Network devices Dynamic discovery & automation Verify System support Global network services Physical Topology Optimized routing design Prepare IP Services IP Address Pools Network Readiness Resilient underlay settings 4 Step Process SDA Ready Network 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 12

Underlay Automation Step 1 :

Understanding Device Roles Cisco DNA Center Core Seed Seed Seed Underlay Automation Block Seed Device Intermediate system(s) between Core and new network block Key system to discover, automate and onboard new Catalyst switches in network 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 14

Understanding Device Roles Cisco DNA Center Cisco DNA Center Core Core Seed Seed Seed Seed Seed Underlay Automation Block PnP-Agent Seed Device Intermediate system(s) between Core and new network block Key system to discover, automate and onboard new Catalyst switches in network PnP-Agent Device Catalyst switch with factory-default settings and waiting at startup-wizard state Interconnect between Seed and another PnP-Agent device in the network 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 14

Underlay Automation Boundary Cisco DNA Center Core 2 Tier Collapsed Core 3 Tier Campus Extended Campus Seed Seed Seed Underlay Automation Boundary Maximum Automation boundary limited to 2 hop count from Seed Device Supporting common hierarchical and structured Enterprise network designs Layer 3 Layer 2 Underlay Automation Boundary 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 15

Network Support Cisco DNA Center Core 2 Tier Collapsed Core 3 Tier Campus Seed Seed Core Dist Seed Seed Access Underlay Network y Dynamic and on-demand network discovery process Seed system programmed to on-board new Catalyst switches with zero configurations Flexible y Support Flexible Multi-tier network topologies support Two or Three-Tier s Day-2 Underlay Automation support for new systems in P2P topologies Layer 3 Layer 2 Underlay Automation Boundary 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 16

Catalyst Switch Role Support Cisco DNA Center Core 2 Tier Collapsed Core 3 Tier Campus Seed Seed Core Dist Seed Seed Access Layer Role Supported Switch Distribution Seed Catalyst 9500 3850-XS 6800 Access Catalyst 9400 9300 4500E 3850 3650 Layer Role Supported Switch Core Seed Catalyst 9500 3850-XS 6800 Distribution Catalyst 9000 3850-XS 4500E 3850 3650 Access Catalyst 9400 9300 4500E 3850 3650 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 17

IP Address Cisco DNA Center Seed-1 S1(config)# interface Loopback 0 S1(config-if)# ip address <ip> <mask>! Core Seed-2 S1(config)# interface Loopback 0 S1(config-if)# ip address <ip> <mask>! Seed Seed 10.128.0.0/16 IS-IS Routing Domain IP Address and identify Network Address range for Underlay Automation network Manually configure IP subnet on inter-seed switch interfaces from Underlay network address range if there is interconnection Interface Address Leverage existing Loopback interface or create new if required Loopback IP could be outside of domain Network address range, but must be reachable to DNA-C Seed devices must not use LAN Automation address pool 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 18

Seed Switch IP Routing Configurations Cisco DNA Center Core OSPF EIGRP Seed Seed 10.128.0.0/16 IS-IS Routing Domain IP Routing Configuration Optional if IS-IS routing protocol in Core Else, manually create IS-IS routing instance without area tag and mutually redistribute between routing domains. No additional IS-IS routing configurations required. Summarize Network range to Core 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 19

Seed Switch IP Routing Configurations Cisco DNA Center Seed-1 OSPF S1(config)# router isis S1(config-router)# redistribute ospf <id> metric <count>! S1(config)# router ospf <id> S1(config-router)# redistribute connected route-map <name> S1(config-router)# summary-address 10.128.0.0 255.255.0.0 Core OSPF EIGRP Seed-2 OSPF S2(config)# router isis S2(config-router)# redistribute ospf <id> metric <count>! S2(config)# router ospf <id> S2(config-router)# redistribute connected route-map <name> S2(config-router)# summary-address 10.128.0.0 255.255.0.0 Seed Seed EIGRP 10.128.0.0/16 IS-IS Routing Domain EIGRP S1(config)# router isis S1(config-router)# redistribute eigrp <id> metric <count>! S1(config)# interface <id> S1(config-if)# description CONNECTED TO CORE S1(config-if)# ip summary-address eigrp <AS> 10.128.0.0 255.255.0.0 S2(config)# router isis S2(config-router)# redistribute eigrp <id> metric <count>! S2(config)# interface <id> S2(config-if)# description CONNECTED TO CORE S2(config-if)# ip summary-address eigrp <AS> 10.128.0.0 255.255.0.0 IP Routing Configuration Optional if IS-IS routing protocol in Core Else, manually create IS-IS routing instance without area tag and mutually redistribute between routing domains. No additional IS-IS routing configurations required. Summarize Network range to Core 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 19

DNA-C IP Routing Configurations Seed Seed 10.128.0.0/16 IS-IS Routing Domain DNA-C IP Routing Configuration DNA-C must have end-to-end IP reachability In Single-Home design the DNA-C performs host function with Default Gateway providing IP routing. In Multi-Home design, the DNA-C must have static route to LAN Automation network(s) via secondary interface. 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 20

DNA-C IP Routing Configurations DNA-C Eth-0 Management Interface : IP Address : <IP_Address> Netmask : <Mask> Gateway : <Default_Gateway> Single-Home Cisco DNA Center Eth-0 Core Seed Seed 10.128.0.0/16 IS-IS Routing Domain DNA-C IP Routing Configuration DNA-C must have end-to-end IP reachability In Single-Home design the DNA-C performs host function with Default Gateway providing IP routing. In Multi-Home design, the DNA-C must have static route to LAN Automation network(s) via secondary interface. 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 20

DNA-C IP Routing Configurations DNA-C Single-Home Cisco DNA Center Multi-Home Cisco DNA Center DNA-C Eth-0 Management Interface : Eth-0 Management Interface : IP Address : <IP_Address> Netmask : <Mask> Eth-0 Core Eth-0 Core IP Address : <IP_Address_1> Netmask : <Mask> Gateway : <Default_Gateway> Gateway : <Default_Gateway> Seed Seed 10.128.0.0/16 IS-IS Routing Domain DNA-C IP Routing Configuration DNA-C must have end-to-end IP reachability In Single-Home design the DNA-C performs host function with Default Gateway providing IP routing. In Multi-Home design, the DNA-C must have static route to LAN Automation network(s) via secondary interface. 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 20

DNA-C IP Routing Configurations DNA-C Single-Home Cisco DNA Center Multi-Home Cisco DNA Center DNA-C Eth-0 Management Interface : Eth-0 Management Interface : IP Address : <IP_Address> Netmask : <Mask> Gateway : <Default_Gateway> Eth-0 Core Eth-0 Core Eth-1 IP Address : <IP_Address_1> Netmask : <Mask> Gateway : <Default_Gateway> Eth-1 Interface : Seed Seed 10.128.0.0/16 IS-IS Routing Domain IP Address : <IP_Address_2> Netmask : <Mask> Gateway : <Skip> Static Route : <LAN_Automation-Net>/<mask>/GW DNA-C IP Routing Configuration DNA-C must have end-to-end IP reachability In Single-Home design the DNA-C performs host function with Default Gateway providing IP routing. In Multi-Home design, the DNA-C must have static route to LAN Automation network(s) via secondary interface. 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 20

Endpoint Connections Cisco DNA Center Core Temp DHCP Server 10.128.0.0/16 Seed Seed Layer 2 Domain Endpoint Integration The may contend for DHCP address with attached Endpoints Underlay automation process may fail if the LAN Pool is consumed by the Endpoints connected to s Recommended to connect Endpoints post successful Underlay Automation procedure 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 21

Endpoint Connections Cisco DNA Center Core Temp DHCP Server 10.128.0.0/16 Seed Seed Layer 2 Domain Before Underlay Automation Not Recommended Endpoint Integration The may contend for DHCP address with attached Endpoints Underlay automation process may fail if the LAN Pool is consumed by the Endpoints connected to s Recommended to connect Endpoints post successful Underlay Automation procedure 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 21

Endpoint Connections Cisco DNA Center Core Seed Seed 10.128.0.0/16 IS-IS Routing Domain After Underlay Automation Recommended Endpoint Integration The may contend for DHCP address with attached Endpoints Underlay automation process may fail if the LAN Pool is consumed by the Endpoints connected to s Recommended to connect Endpoints post successful Underlay Automation procedure 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 21

Seed Switch Feature Validation Verify no conflicting Spanning-Tree CLI is not present, i.e. spanning-tree portfast default Verify Seed device do not have any network address belonging to LAN Automation IP Pool Pre-configure IS-IS routing without Area Tag. Mutual route-redistribution. No additional IS-IS routing configuration implemented. 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 22

Seed Switch Feature Validation Verify no conflicting Spanning-Tree CLI is not present, i.e. spanning-tree portfast default Verify Seed device do not have any network address belonging to LAN Automation IP Pool Pre-configure IS-IS routing without Area Tag. Mutual route-redistribution. No additional IS-IS routing configuration implemented. Verify SSH configuration terminal access is present. Telnet is unsupported 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 22

Underlay Automation Step 2 :

Overview Network Hierarchy Geographic Network Configuration Network Hierarchy Site Bldg Floor Add Floor Network Settings Global Network Services Configuration System Management Services Network Address 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 25

Create Global Network Regions 1 Add Regions or Sites 1 Add Regions or Sites Add Area - can be Region across Global Area is optional. Sites is mandatory. Manual or Bulk configuration thru CSV 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 26

Create Global Network Regions 1 Add Regions or Sites 2 Add Network Hierarchy 1 Add Regions or Sites 2 Add Network Hierarchy Add Area - can be Region across Global Area is optional. Sites is mandatory. Manual or Bulk configuration thru CSV Add Sites including Buildings & Floors Auto geo-location based on Address Manual or Bulk configuration thru CSV 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 26

Create Global Network Regions 25 30 50 32 34 44 20 30 50 28 5 24 10 11 19 1 Add Regions or Sites 2 Add Network Hierarchy Add Area - can be Region across Global Area is optional. Sites is mandatory. Manual or Bulk configuration thru CSV Add Sites including Buildings & Floors Auto geo-location based on Address Manual or Bulk configuration thru CSV 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 26

Global Network Settings Global Network Services Consistent configuration compliance with global services Configure services required globally inherited Not actual GUI 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 29

Global Network Settings Global Network Services Consistent configuration compliance with global services Configure services required globally inherited Area Network Services Assign Per-Area or Regional services Override service inheritance from parent All device under Area inherits services Not actual GUI 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 29

Configure Global Network Services 1 Add and Configure Server Address Network Services Configurations Configuration Compliance Add all required network services step configures systems 2 Save Configuration Multiple servers can be added for load sharing and redundancy Updates can re-provisioned for Day-2 operation 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 31

Configure Global Device Credentials CLI Credential Configurations SNMP Credentials Common login credentials for all devices under selected hierarchy Multiple local login accounts can be created and automated Automate SNMP community configuration. Multiple SNMP community possible. Only one active 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 32

Configure Global Device Credentials 1 Configure and Select Credentials CLI Credential Configurations SNMP Credentials Common login credentials for all devices under selected hierarchy Multiple local login accounts can be created and automated Automate SNMP community configuration. Multiple SNMP community possible. Only one active 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 32

Configure Global Device Credentials 1 Configure and Select Credentials 2 Configure and Select SNMP CLI Credential Configurations Common login credentials for all devices under selected hierarchy Multiple local login accounts can be created and automated SNMP Credentials Automate SNMP community configuration. Multiple SNMP community possible. Only one active 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 32

Configure Global Device Credentials 1 Configure and Select Credentials 2 Configure and Select SNMP CLI Credential Configurations SNMP Credentials Common login credentials for all devices under selected hierarchy Multiple local login accounts can be created and automated Automate SNMP community configuration. Multiple SNMP community possible. Only one active 3 Save Configuration 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 32

Global Network Range Global Network Range 10.0.0.0/8 Global Network Range Structured Enterprise IP network design ned and divided regionally for optimal network communications Not actual GUI 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 33

Global Network Range Global Network Range 10.0.0.0/8 /19 /16 /19 /16 /16 /19 /19 /21 /16 /21 /21 /19 /21 /21 /19 /21 /21 Global Network Range Structured Enterprise IP network design ned and divided regionally for optimal network communications Area IP Pool Subset of Global range assigned to Area, Site for multi-function distribution purpose. Reserve IP Pool from Area to automate network intent for various operations Not actual GUI 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 33

Configure Global Network Range Global Network Range Structured Enterprise IP network design ned and divided regionally for optimal network communications Global IP Pool IP address repository for multi-function distribution purpose to Area, Site etc. Reserve IP Pool from Area to automate network intent for various operations 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 34

Configure Global Network Range 1 Assign unique IP Pool Name Global Network Range Structured Enterprise IP network design ned and divided regionally for optimal network communications Global IP Pool IP address repository for multi-function distribution purpose to Area, Site etc. Reserve IP Pool from Area to automate network intent for various operations 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 34

Configure Global Network Range 1 Assign unique IP Pool Name Network Range for specific Area 2 Global Network Range Structured Enterprise IP network design ned and divided regionally for optimal network communications Global IP Pool IP address repository for multi-function distribution purpose to Area, Site etc. Reserve IP Pool from Area to automate network intent for various operations 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 34

Configure Global Network Range 1 Assign unique IP Pool Name Network Range for specific Area 2 Classful Network Mask 3 Global Network Range Structured Enterprise IP network design ned and divided regionally for optimal network communications Global IP Pool IP address repository for multi-function distribution purpose to Area, Site etc. Reserve IP Pool from Area to automate network intent for various operations 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 34

Configure Global Network Range 1 Assign unique IP Pool Name Network Range for specific Area 2 Classful Network Mask 3 Gateway IP Address 4 Global Network Range Structured Enterprise IP network design ned and divided regionally for optimal network communications Global IP Pool IP address repository for multi-function distribution purpose to Area, Site etc. Reserve IP Pool from Area to automate network intent for various operations 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 34

Configure Global Network Range 1 Assign unique IP Pool Name Network Range for specific Area 2 Classful Network Mask 3 Gateway IP Address 4 5 Save to create new entry Global Network Range Structured Enterprise IP network design ned and divided regionally for optimal network communications Global IP Pool IP address repository for multi-function distribution purpose to Area, Site etc. Reserve IP Pool from Area to automate network intent for various operations 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 34

Configure LAN Pool at Site Reserve LAN IP Pool Configure Pool Name and Type = LAN One Fabric Domain = One LAN Pool Select Parent Pool to reserve Network Address Range 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 35

Configure LAN Pool at Site 1 Assign unique LAN Pool Name Reserve LAN IP Pool Configure Pool Name and Type = LAN One Fabric Domain = One LAN Pool Select Parent Pool to reserve Network Address Range LAN IP Assignments Supported Netmask Range 8 24 Dynamic IP address assignment from the LAN pool Add more as network grow 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 35

Configure LAN Pool at Site 1 Assign unique LAN Pool Name Select LAN from menu 2 Reserve LAN IP Pool Configure Pool Name and Type = LAN One Fabric Domain = One LAN Pool Select Parent Pool to reserve Network Address Range LAN IP Assignments Supported Netmask Range 8 24 Dynamic IP address assignment from the LAN pool Add more as network grow 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 35

Configure LAN Pool at Site 1 Assign unique LAN Pool Name Select LAN from menu 2 Select Area Network Range 3 Reserve LAN IP Pool Configure Pool Name and Type = LAN One Fabric Domain = One LAN Pool Select Parent Pool to reserve Network Address Range LAN IP Assignments Supported Netmask Range 8 24 Dynamic IP address assignment from the LAN pool Add more as network grow 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 35

Configure LAN Pool at Site 1 Assign unique LAN Pool Name Select LAN from menu 2 Select Area Network Range 3 Assign LAN Pool Address and Mask 4 Reserve LAN IP Pool Configure Pool Name and Type = LAN One Fabric Domain = One LAN Pool Select Parent Pool to reserve Network Address Range LAN IP Assignments Supported Netmask Range 8 24 Dynamic IP address assignment from the LAN pool Add more as network grow 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 35

Configure LAN Pool at Site 1 Assign unique LAN Pool Name Select LAN from menu 2 Select Area Network Range 3 Assign LAN Pool Address and Mask 4 5 Reserve to create new entry Reserve LAN IP Pool Configure Pool Name and Type = LAN One Fabric Domain = One LAN Pool Select Parent Pool to reserve Network Address Range LAN IP Assignments Supported Netmask Range 8 24 Dynamic IP address assignment from the LAN pool Add more as network grow 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 35

Configuration Summary Step-1 Build Network Hierarchy based on geographic locations Step-2 Configure Network Services Global Area Site level Step-3 Step-4 Configure Network Address Range Global Area Site level Configure LAN IP Pool from Parent Global Area Site level 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 36

Underlay Automation Step 3 : y

y Overview Cisco DNA Center Core 2 Tier Collapsed Core 3 Tier Campus Seed Seed Core Dist Seed Seed Access Underlay Network y Dynamic and on-demand network discovery process Seed system programmed to on-board new Catalyst switches with zeroconf Flexible y Support Flexible network topologies with Dual or Single Seed system Day-2 Underlay Automation support for new systems Layer 3 Layer 2 Underlay Automation Boundary 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 38

y Seed System y Seed System y Initial automation-step to add Seed system in DNA-C inventory Assign Seed system Loopback IP range to initiate SNMP-based discovery 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 40

y Seed System y 1 Assign y Profile Name Seed System y Initial automation-step to add Seed system in DNA-C inventory Assign Seed system Loopback IP range to initiate SNMP-based discovery 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 40

y Seed System y 1 Assign y Profile Name 2 Seed-1-Loopback IP Seed-2-Loopback IP Assign Seed System IP Range Seed System y Initial automation-step to add Seed system in DNA-C inventory Assign Seed system Loopback IP range to initiate SNMP-based discovery 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 40

y Seed System y 1 Assign y Profile Name 4 Save Configuration 2 Seed-1-Loopback IP Seed-2-Loopback IP Assign Seed System IP Range 3 Retain Global Settings unless unique Seed System y Initial automation-step to add Seed system in DNA-C inventory Assign Seed system Loopback IP range to initiate SNMP-based discovery 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 40

y Seed System Inventory Seed System y Seed device automatically added in Inventory. s system information Prepares for Underlay network infrastructure discovery and automation 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 43

y Configuration Summary Step-1 Step-2 Step-3 Build y Profile Assign Primary and Secondary Seed System IP address to discover Retain remaining parameters unless unique value Step-4 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 44

Underlay Automation Step 4 :

Underlay Automation Underlay DNA-C supports Underlay and Overlay network automation All systems under Seed are dynamically discovered and programmed using PnP function 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 46

Add Seed Systems to Site 1 Add Seed system to Site Underlay After successful Step-2 discovery the Seed systems are automatically added in table Add Seed systems to a Building of an Site where deployed for logical grouping 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 47

Add Seed Systems to Site 1 Add Seed system to Site 2 Update Software if needed Underlay After successful Step-2 discovery the Seed systems are automatically added in table Add Seed systems to a Building of an Site where deployed for logical grouping Upgrade Software Upgrade Cisco IOS software on Seed device(s) if new version required Optional step to proceed further on Underlay Automation 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 47

Device Inventory Views Change Topology View 1 Underlay Device Inventory provides two views providing unique functions Table and Topology Table view provides device inventory and states Topology view provides function 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 48

Initiate y Process Select Seed Systems Click each discovered seed system and select and Both systems are programmed with all required parameters to successfully discover and automate all systems 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 49

Initiate y Process S1 S2 1 Select Primary Seed-1 System 2 Select Secondary Seed-2 System Select Seed Systems Click each discovered seed system and select and Both systems are programmed with all required parameters to successfully discover and automate all systems 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 49

Start Automation Start Automation Process Primary Seed is temporarily programmed with DHCP and options. Automatic failover to Secondary if Primary fails during automation. Selected Ports are automated to discover direct and in-direct attached PnP-Agent switches 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 50

Start Automation 1 Click LAN Automation Start Automation Process Primary Seed is temporarily programmed with DHCP and options. Automatic failover to Secondary if Primary fails during automation. Selected Ports are automated to discover direct and in-direct attached PnP-Agent switches 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 50

Start Automation 1 Click LAN Automation 2 Select Site Start Automation Process Primary Seed is temporarily programmed with DHCP and options. Automatic failover to Secondary if Primary fails during automation. Selected Ports are automated to discover direct and in-direct attached PnP-Agent switches 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 50

Start Automation 1 Click LAN Automation 2 Select Site 3 Select Seed Devices Start Automation Process Primary Seed is temporarily programmed with DHCP and options. Automatic failover to Secondary if Primary fails during automation. Selected Ports are automated to discover direct and in-direct attached PnP-Agent switches 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 50

Start Automation 1 Click LAN Automation 2 Select Site 4 Select Site LAN IP Pool 3 Select Seed Devices Start Automation Process Primary Seed is temporarily programmed with DHCP and options. Automatic failover to Secondary if Primary fails during automation. Selected Ports are automated to discover direct and in-direct attached PnP-Agent switches 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 50

Start Automation 1 Click LAN Automation 2 Select Site 4 Select Site LAN IP Pool 3 Select Seed Devices 5 Optional. Configure Name Prefix Start Automation Process Primary Seed is temporarily programmed with DHCP and options. Automatic failover to Secondary if Primary fails during automation. Selected Ports are automated to discover direct and in-direct attached PnP-Agent switches 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 50

Start Automation 1 Click LAN Automation 2 Select Site 4 Select Site LAN IP Pool 3 Select Seed Devices 5 Optional. Configure Name Prefix 6 Select Underlay Network Interface Start Automation Process Primary Seed is temporarily programmed with DHCP and options. Automatic failover to Secondary if Primary fails during automation. Selected Ports are automated to discover direct and in-direct attached PnP-Agent switches 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 50

Start Automation 1 Click LAN Automation 2 Select Site 4 Select Site LAN IP Pool 3 Select Seed Devices 5 Optional. Configure Name Prefix 6 Select Underlay Network Interface Start Automation Process Primary Seed is temporarily programmed with DHCP and options. Automatic failover to Secondary if Primary fails during automation. Selected Ports are automated to discover direct and in-direct attached PnP-Agent switches 7 Start Underlay y 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 50

Start Automation 1 Click LAN Automation 2 Select Site 4 Select Site LAN IP Pool 3 Select Seed Devices 5 Optional. Configure Name Prefix 6 Select Underlay Network Interface Start Automation Process See Notes for more details Primary Seed is temporarily programmed with DHCP and options. Automatic failover to Secondary if Primary fails during automation. 7 Start Underlay y Selected Ports are automated to discover direct and in-direct attached PnP-Agent switches 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 50

Stop Automation Stop Automation Process All discovered and automated Switches must reach to Completed status. Process time may vary on network size Stop the automation. This action completes process and transitions all switches to final state 2 Stop Underlay Automation 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 51

Stop Automation Stop Automation Process See Notes for more details All discovered and automated Switches must reach to Completed status. Process time may vary on network size 2 Stop Underlay Automation Stop the automation. This action completes process and transitions all switches to final state 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 51

Global Network Services Global Service all Global or Area configured services to newly discovered switches The services configuration are supported over non-mgmt Core network infrastructure 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 52

Define System Roles System Role Administrator must select each switch and define its network role Access Distribution Core DNA-C auto-arranges topology view based on user selection 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 57

Validate Configuration Underlay Automation Configurations DNA-C automates broad set of network configuration on Seed and Switches All systems are programmed with variety of technologies and best practices for reliable underlay network infrastructure 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 59

Validate Configuration Underlay Automation Underlay Automation Configurations DNA-C automates broad set of network configuration on Seed and Switches All systems are programmed with variety of technologies and best practices for reliable underlay network infrastructure 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 59

Validate Configuration Underlay Automation Point-to-Point Interface configurations Loopback Interface configurations Underlay Automation Configurations DNA-C automates broad set of network configuration on Seed and Switches All systems are programmed with variety of technologies and best practices for reliable underlay network infrastructure 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 59

Validate Configuration Underlay Automation Point-to-Point Interface configurations Loopback Interface configurations IS-IS Routing Protocol BFD, IP Dampening, High Availability Underlay Automation Configurations DNA-C automates broad set of network configuration on Seed and Switches All systems are programmed with variety of technologies and best practices for reliable underlay network infrastructure 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 59

Validate Configuration Underlay Automation Point-to-Point Interface configurations Loopback Interface configurations IS-IS Routing Protocol BFD, IP Dampening, High Availability IP Routing Security, Device Security AAA, 802.1X, IP Device Tracking Underlay Automation Configurations DNA-C automates broad set of network configuration on Seed and Switches All systems are programmed with variety of technologies and best practices for reliable underlay network infrastructure 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 59

Validate Configuration Underlay Automation Point-to-Point Interface configurations Loopback Interface configurations IS-IS Routing Protocol BFD, IP Dampening, High Availability IP Routing Security, Device Security AAA, 802.1X, IP Device Tracking SNMP Traps, Syslog, Radius SSH, HTTP and OOB Access Management Underlay Automation Configurations DNA-C automates broad set of network configuration on Seed and Switches All systems are programmed with variety of technologies and best practices for reliable underlay network infrastructure 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 59

Validate Configuration Underlay Automation Point-to-Point Interface configurations Loopback Interface configurations IS-IS Routing Protocol BFD, IP Dampening, High Availability IP Routing Security, Device Security AAA, 802.1X, IP Device Tracking SNMP Traps, Syslog, Radius SSH, HTTP and OOB Access Management Underlay Automation Configurations DNA-C automates broad set of network configuration on Seed and Switches All systems are programmed with variety of technologies and best practices for reliable underlay network infrastructure Click to verify configurations Microsoft Word Document 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 59

SD-Access Ready! SD-Access Ready DNA-C auto-arranges topology view based on user selection. All systems are programmed and ready to build an overlay networks Resynchronize Device Inventory if partial topology discovered 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 60

Configuration Summary Step-1 Step-2 Step-3 Step-4 Step-5 Add Seed systems to Site Start Underlay Network discovery and automation Stop Underlay Network discovery and automation Global Network services ate System role to build structure network topology 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 61

Network Expansion Cisco DNA Center Core Access Network Expansion Seed Access Network Expansion Automate from Parent Seed device as Access network expands. Transparent process with existing switches sharing same or different LAN Pool 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 62

Network Expansion Cisco DNA Center Core Access Network Expansion Distribution Network Expansion Seed Seed Access Network Expansion Automate from Parent Seed device as Access network expands. Transparent process with existing switches sharing same or different LAN Pool Distribution Network Expansion Automate new network block from Parent Seed device. Reuse or create new LAN Pool. Use Distribution as Seed if Access expands 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 62

Take Away

Key Takeaway Accelerate SD-Access deployment with Zero configuration Underlay Automation Underlay networks are optimized, resilient with integrated Cisco Best Practices 25 32 50 44 20 Four simplified steps to rapidly 30 automate large network infrastructure 30 34 28 50 24 5 10 11 Automate Global or Area local system and network services for consistency 19 Flexible Automated solution for Day-0 or Day-2 network deployments 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 64

SD-Access Support Fabric ready platforms for your digital ready network Switching Routing Wireless Extended NEW Catalyst 9400 NEW Catalyst 9300 ASR-1000-X AIR-CT5520 NEW NEW ASR-1000-HX AIR-CT8540 NEW CDB Catalyst 9500 ISR 4430 AIR-CT3504 NEW 3560-CX Catalyst 4500E Catalyst 6800 Nexus 7700 ISR 4450 Wave 2 APs (1800,2800,3800) NEW Catalyst 3650 and 3850 ISRv/CSRv Wave 1 APs * (1700,2700,3700) IE (2K/3K/4K/5K) * with Caveats 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 65

What to Do Next? Technical Advisory Managed Implementation Optimization Training SD-Access Capable DNA Center Cisco Services Refresh your Hardware & Software Deploy the DNA Center Engage with Cisco Services Get SD-Access Capable Devices with DNA Advantage OS License Get DNA Center Appliances with DNA Center Software Cisco Services can help you to Test - Migrate - Deploy 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 66

Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Complete Your Online Session Evaluation Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at www.ciscolive.com/global/on-demand-library/. 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Tech Circle Meet the Engineer 1:1 meetings Related sessions 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 73

Thank you