We can host this training at your preferred location. Contact us!

Understand the role of ISE in a SD-Access solution.

Software-Defined Access (SD-Access) is the industry’s first intent-based networking solution for the Enterprise built on the principles of Cisco’s Digital Network Architecture (DNA). SD-Access provides automated end-to-end segmentation to separate user, device and application traffic without redesigning the network.

There are many challenges to manage enterprise networks including manual configuration and fragmented tool offerings. Manual operations are slow and error-prone and these issues are exacerbated by constantly changing environments with more users, devices and applications. With the growth of users and different devices types accessing the network, it is has become more complex to configure user credentials and maintain a consistent policy across the network.

Without a consistent access policy, it is difficult to maintain separate policies between wired and wireless or to locate users and troubleshoot issues as users move around the network. The bottom line is that networks today do not address current network needs. The SDAISE course addresses these issues.

Who Should Attend?

Anyone interested in knowing about SD-Access
Personnel involved in SD-Access Design and Implementation
Network Operations team with SD-Access solution

It is recommended that students have the following knowledge and skills prior to attending this course:

Knowledge level equivalent to Cisco CCNA Routing & Switching
Basic knowledge of Software Defined Networks
Basic knowledge of network security including AAA, Access Control, and ISE
Basic knowledge and experience with Cisco IOS, IOS XE, and CLI

Upon completion of this course, the learner will be able to meet these overall objectives:

Explain the role that ISE plays as part of the solution
Configure AAA services and TrustSec Policy in ISE
Explain ISE Integration with DNA Center for Policy enforcement
Know and understand Cisco’s SD-Access concepts, features, benefits, terminology and the way this approach innovates common administrative tasks on today’s networks.
Differentiate and explain each of the building blocks of SD-Access Solution
Explain the concept of “Fabric” and the different node types that conform it (Fabric Edge Nodes, Control Plane Nodes, Border Nodes)
Describe the role of LISP in Control Plane and VXLAN in Data Plane for SD-Access Solution
Understand TrustSec concepts, deployment details and the way it is used as part of SD-Access Solution for segmentation and Policy Enforcement
Understand the role of DNA Center as solution orchestrator and Intelligent GUI
Be familiar with workflow approach in DNA Center - Design, Policy, Provision and Assurance

Module 1: Cisco ISE Integration for SD Access

Introduction to Cisco ISE
Using Cisco ISE as a Network Access Policy Engine
Introducing Cisco ISE Deployment Models
Introducing 802.1x and MAB Access: Wired and Wireless
Introducing Identity Management
Configuring Certificate Service
Introducing Cisco ISE Policy
Configuring Cisco ISE Policy Sets
Introduction to Cisco TrustSec for segmentation
The Concept of Security Group (SG) and Security Group Tag (SGT)
Cisco TrustSec Phases
Classification
Propagation
Enforcement
Methods for Classification
Static Classification
Dynamic Classification
Methods for SGT tag propagation
Inline Tagging
SGT Exchange Protocol (SXP)

Module 2: Introduction to Cisco’s Software Defined Access (SD-Access)

SD-Access Overview
SD-Access Benefits
SD-Access Key Concepts
SD-Access Main Components
Campus Fabric
Wired
Wireless
Nodes
Edge
Border
Control Plane
DNA Controller (APIC-EM Controller)
Introducing Cisco ISE 2.x px
2-level Hierarchy
Macro Level: Virtual Network (VN)
Micro Level: Scalable Group (SG)

Module 3: DNA Center Workflow

DNA Center Refresher
Creating Enterprise and Sites Hierarchy
Configuring General Network Settings
Loading maps into the GUI
IP Address Management
Software Image Management
Network Device Profiles
Introduction to Analytics
NDP Fundamentals
Overview of DNA Assurance

Module 4: SD-Access Campus Fabric

The concept of Fabric
Node types (Breakdown)
LISP as protocol for Control Plane
VXLAN as protocol for Data Plane

Module 5: Campus Fabric External Connectivity for SD-Access

Enterprise Sample Topology for SD-Access
Role of Border Nodes
Types of Border Nodes
Border
Default Border
Single Border vs. Multiple Border Designs
Collocated Border and Control Plane Nodes
Distributed (separated) Border and Control Plane Nodes

Module 6: Implementing WLAN in SD-Access Solution

WLAN Integration Strategies in SD-Access Fabric
Fabric CUWN
SD-Access Wireless (Fabric enabled WLC and AP)
SD-Access Wireless Architecture
Control Plane: LISP and WLC
Data Plane: VXLAN
Policy Plane and Segmentation: VN and SGT
Sample Design for SD-Access Wireless

Why have you chosen us?

I have attended a training from Bilginc IT Academy before and I was satisfied.

I have attended a training from a different provider and it was not helpful.

Other

How many employees do you have in your IT department?

0 – 50

50 – 250

250 – 1000

1000+

SDAISE - Software Defined Access & ISE Integration for Policy Deployment & Enforcement v1.0 Training Course in Finland

Finland is a country located in northern Europe. Helsinki is the capital and largest city of the country. The majority of the people are Finns but there is also a small Lapp population in Lapland, where the country is famous for the Northern Lights. Finland's national languages are Finnish and Swedish.

Known for its vast forests, lakes, and natural beauty, Finland is one of the world's largest producers of forest products, such as paper, pulp, and lumber. One of the world's largest sea fortresses Suomenlinna, Rovaniemi with the "White Nights", dogsled safaris and of course the Northern Lights are what makes Finland so popular for tourists. Finland is one of the best places in the world to see the Northern Lights and attracts millions of tourists during its seasons.

Finland is home to a thriving technology industry and is widely recognized as one of the world's leading technology hubs. Companies such as Nokia and Rovio (creator of the popular game Angry Birds) are based in Finland. Some of the key factors that have contributed to Finland's success in technology include; strong investment in research and development, a highly educated workforce and fundings.

Finland has a strong educational system, and is widely regarded as one of the world's most literate countries. In fact, Finland's literacy rate is one of the highest in the world, and its students consistently perform well in international tests of math and reading ability.

Also, as a pioneer in environmental sustainability, Finland is known for its efforts to reduce its carbon footprint and promote clean energy. This Nordic country is also famous for its unique and distinctive cultural heritage, including its traditional folk music and its elaborate traditional costumes.

Helsinki, Finland's capital city, is the country's business center. Helsinki is Finland's largest city, and it is home to many of the country's major corporations and organizations, including many of the country's leading technology firms. The city is also a commercial, trade, and financial center, as well as one of the busiest ports in the Nordic region.

Take advantage of our diverse IT course offerings, spanning programming, software development, business skills, data science, cybersecurity, cloud computing and virtualization. Our knowledgeable instructors will provide you with practical training and industry insights, delivered directly to your chosen venue in Finland.

SDAISE - Software Defined Access & ISE Integration for Policy Deployment & Enforcement v1.0 Training in Finland

Who Should Attend?

Upcoming Trainings

SDAISE - Software Defined Access & ISE Integration for Policy Deployment & Enforcement v1.0 Training in Finland

Who Should Attend?

Prerequisites

What You Will Learn

Outline

Upcoming Trainings