Manually configuring hundreds of network devices creates unnecessary friction, even when the differences between configs are minimal. Jinja templating in Catalyst Center lets you parameterise device configurations, so you write a template once and provision devices at scale by feeding in different variable values. This approach eliminates copy-paste errors and makes configuration management auditable and […]
Category: Cisco
In our last post, we established that external connectivity in SD-Access is just routing between VRFs — BGP out, VRF-lite handoff, fusion router in between. If you haven’t read it yet, start there. This post builds directly on top of it. Today we’re going to tackle one of the most common points of confusion in […]
Welcome to the first instalment of our series on Cisco SD-Access design. If you’ve been diving into fabric technology, it’s easy to get lost in the alphabet soup of LISP, VXLAN, and SGTs. But when it comes to the critical task of getting traffic in and out of your fabric, there is a refreshing truth: […]
In my lab environment I have a ‘Lab Users’ OU that I will apply this group policy to. Open Group Policy Management and right click the ‘Lab Users’ Group, select ‘Create GPO in this domain, and Link it here…’. Give it a name, e.g. ‘802.1x Group Policy’, and then navigate to ‘Computer Configuration -> Policies […]
This post will look at configuring a Windows Active Directory CA server with a certificate template for use with ISE that enables both ‘client authentication’, and ‘server authentication’ key usage. We have a simple network topology with a single ISE node, single Windows server, and a single Windows client machine. MMC Open the MMC, I […]