Cisco Software-Defined Access (Networking Technology)

Description

The definitive Cisco SD-Access resource, from the architects who train Cisco’s own engineers and partners This comprehensive book guides you through all aspects of planning, implementing, and operating Cisco Software-Defined Access (SD-Access). Through practical use cases, you’ll learn how to use intent-based networking, Cisco ISE, and Cisco DNA Center to improve any campus network’s security and simplify its management. Drawing on their unsurpassed experience architecting solutions and training technical professionals inside and outside Cisco, the authors explain when and where to leverage Cisco SD-Access instead of a traditional legacy design. They illuminate the fundamental building blocks of a modern campus fabric architecture, show how to design a software-defined campus that delivers the most value in your environment, and introduce best practices for administration, support, and troubleshooting. Case studies show how to use Cisco SD-Access to address secure segmentation, plug and play, software image management (SWIM), host mobility, and more. The authors also present full chapters on advanced Cisco SD-Access and Cisco DNA Center topics, plus detailed coverage of Cisco DNA monitoring and analytics. Learn how Cisco SD-Access addresses key drivers for network change, including automation and securityExplore how Cisco DNA Center improves network planning, deployment, evolution, and agilityMaster Cisco SD-Access essentials: design, components, best practices, and fabric constructionIntegrate Cisco DNA Center and Cisco ISE, and smoothly onboard diverse endpointsEfficiently operate Cisco SD-Access and troubleshoot common fabric problems, step by stepMaster advanced topics, including multicast flows, Layer 2 flooding, and the integration of IoT devicesExtend campus network policies to WANs and data center networksChoose the right deployment options for Cisco DNA Center in your environmentMaster Cisco DNA Assurance analytics and tests for optimizing the health of clients, network devices, and applications Title Page Copyright Page About the Author(s) About the Technical Reviewers Dedications Acknowledgments Contents at a Glance Reader Services Contents Icons Used in This Book Command Syntax Conventions Introduction Goals and Methods Who Should Read This Book? How This book Is Organized Book Structure Chapter 1. Today’s Networks and the Drivers for Change Networks of Today Common Business and IT Trends Common Desired Benefits High-Level Design Considerations Cisco Digital Network Architecture Past Solutions to Today’s Problems Introduction to Multidomain Summary Chapter 2. Introduction to Cisco Software-Defined Access Challenges with Today’s Networks Software-Defined Networking Cisco Software-Defined Access Network Access Control Introduction to Cisco Identity Services Engine Cisco ISE Design Considerations Segmentation with Cisco TrustSec Summary Chapter 3. Introduction to Cisco DNA Center Network Planning and Deployment Trends History of Automation Tools Cisco DNA Center Overview Design and Visualization of the Network Network Discovery and Inventory Device Configuration and Provisioning Summary Chapter 4. Cisco Software-Defined Access Fundamentals Network Topologies Cisco Software-Defined Access Underlay Wireless LAN Controllers and Access Points in Cisco Software-Defined Access Shared Services Transit Networks Fabric Creation Fabric Device Roles Host Onboarding Summary References in This Chapter Chapter 5. Cisco Identity Services Engine with Cisco DNA Center Policy Management in Cisco DNA Center with Cisco ISE Group-Based Access Control Segmentation with Third-Party RADIUS Server Secure Host Onboarding in Enterprise Networks 802.1X Phased Deployment Host Onboarding with Cisco DNA Center Security in Cisco Software-Defined Access Network Policy Set Overview in Cisco ISE Segmentation Policy Construction in Cisco SD-Access Segmentation Outside the Fabric Summary References in This Chapter Chapter 6. Cisco Software-Defined Access Operation and Troubleshooting Cisco SD-Access Under the Covers Host Operation and Packet Flow in Cisco SD-Access Cisco SD-Access Troubleshooting Authentication/Policy Troubleshooting Summary References in This Chapter Chapter 7. Advanced Cisco Software-Defined Access Topics Cisco Software-Defined Access Extension to IoT Multicast in Cisco SD-Access Multicast Flows in Cisco SD-Access Layer 2 Flooding in Cisco SD-Access Layer 2 Border in Cisco SD-Access Cisco SD-Access for Distributed Campus Deployments Cisco SD-Access Design Considerations Cisco SD-Access Policy Extension to Cisco ACI Summary References in This Chapter Chapter 8. Advanced Cisco DNA Center Cisco DNA Center Architecture and Connectivity Software Image Management Cisco DNA Center Templates Plug and Play Claiming a Device Cisco DNA Center Tools Summary References in This Chapter Chapter 9. Cisco DNA Assurance Assurance Benefits Cisco DNA Assurance Architecture Cisco DNA Assurance Tools Summary References in This Chapter Glossary