ENCOR - SDA Fabric Operation

Подписаться 9 тыс.

Просмотров 15 тыс.

50% 1

In this video, we take a look at SDA Fabric Operation, which includes Cisco TrustSec policy enforcement, client onboarding, wireless operation, and anycast gateways!
RU-vid Playlists from Jeff Kish
▶ ENCOR Study Group: • ENCOR Study Group
▶ CCNA Study Group: • CCNA Study Group
💻 Jeff's ENCOR content on CBT Nuggets: learn.gg/encor-...
💻 All of Jeff's content on CBT Nuggets: learn.gg/jeff-...
#ccnp #encor #ciscocert

Опубликовано:

6 сен 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 27

@MrEDGE1984 3 года назад

Congrats! You're a "Networking Science Promoter" not only just an awesome teacher! They way you make complicated concepts easier really motivates a lot! Subscribed.

@siddheshshirsat292 5 месяцев назад

This is very helpful in understanding SDA.. need similar video series for Cisco ACI.

@toralkabrawala 3 года назад

Very well explained. Easy to understand - thank you for the videos.

@thesolidshadow 3 года назад

Wauw Jeff, that really is/was a very awesome video to watch! Thanks so much, what a great summary!

@KishSquared 3 года назад

Thanks for the kind words! So glad it was useful to you.

@internettelevision1832 3 года назад

Thanks for these vids, pretty sure you're on teh cutting edge with the exam topics.

@nicktucker3437 3 месяца назад

56:48 realistically the Internet could possibly live off of the other border node in this scenario I'd think.

@madoalfarsi2930 4 месяца назад

Hi Kish. Thanks for the videos. How can we find a Lab where we can see VXLAN and LISP actually running. I am kind of Visual. I understand things when I see them. Thank you so much

@steele_ntwrk 3 года назад

Great Vid @KishSquared! How do the anycast gateways work with EID-to-RLOC mapping?

@jorgegarciamex 5 месяцев назад

awesome material!.. thank you!

@vkumar2915 2 года назад

Thank you for this informative session 🙏

@user-of1kr2zb7m 3 года назад

Hello, have two questions: 1. How hosts get an IP address? As tradisional by DHCP server? Which device acts as DHCP server? Control Plane Node, Edge Node? 2. How and where SGT stores? How Edge Node knows which hosts it permits or deny sending traffic? Where this information stores? How, when and where edge nodes requests it? If answers in other videos please give the links. Thanks a LOT!

@KishSquared 3 года назад

1. Yes, a traditional DHCP server still works! We can setup a DHCP helper address on the edge nodes alongside the anycast gateways. 2. Cisco ISE is a required component of SDA, and this is where we configure the SGTs. The SGT policy is pushed to the edge nodes from ISE, which use the policy to decide on forwarding. This policy is enforced on egress, i.e. when the ETR receives the traffic from the ITR. This way the edge device only needs to store policy for its local segments, and not for the entire network, which would be required if it was enforced on ingress. I hope this helps!

@somaliudiidaceeb2904 2 месяца назад

Hi everyone, Is this correct? Internal Border Node = MS/MR / PITR External Border Node = PETR.

@bartdemotte506 Год назад

What happens if the CP or DNA in SDA fabric is unreachable for more then 24 hours?

@AB-fj5wi 2 года назад

How are broadcasts and BUM traffic in general handled? With MP BGP the vteps join multicast groups associated with the VNIs they serve. How is this handled in the SDA environment? I'm very confused as to where and how layer 2 separation happens. If VNIs are used to denote VRFs, how is layer 2 segmentation implemented?

@ponytrap12 2 года назад

36:02 incorrect to say ACI removes control plane from devices. Control plane remains on leaf switches

@jonathanmoore8886 3 года назад

How would we do redundancy for a CP Node? Do these nodes use a HSRP? Would ingress traffic on an Anywhere Border node be treated the same as traffic on an internal border node?