Software Defined Access and ISE Integration for Policy Deployment and Enforcement
- Code training SDAISE
- Duur 3 dagen
- Versie 1.0
Andere trainingsmethoden
Extra betaalopties
- Cisco Learning Credits Bel: 030-6089300
Ga naar:
Methode
Deze training is in de volgende formats beschikbaar:
-
Op locatie klant
Op locatie klant
-
Virtueel leren
Virtueel leren
Vraag deze training aan in een andere lesvorm.
Trainingsbeschrijving
Naar bovenSD-Access is Cisco’s Next Generation campus networking solution that simplifies management, automation, and improves security implications.
Who (People), what (Devices), when (Time) and where (Location) are questions we would like answered when working with users and devices! These questions are answered within a single pane of glass known as the Cisco Identity Services Engine (ISE). Once users and devices are identified we often segment these groups for management purposes. Cisco's Digital Networks Architecture Center (DNAC) is a means of configuring and maintaining that segmentation using software defined access. DNA Center is not limited to configuration changes. DNA Center also provides a policy-based approach to services that support the network such as NTP, DNS, DHCP. In this course, you integrate ISE and DNAC which gives you the ability to manage physical devices, logical segmentation, IP, transport rules as well as Authentication, Authorization and Accounting (AAA) of users and devices along with an overview and introduction to SD-Access and DNA Center.
Virtual Learning
This interactive training can be taken from any location, your office or home and is delivered by a trainer. This training does not have any delegates in the class with the instructor, since all delegates are virtually connected. Virtual delegates do not travel to this course, Global Knowledge will send you all the information needed before the start of the course and you can test the logins.
Virtueel en Klassikaal™
Virtueel en Klassikaal™ is een eenvoudig leerconcept en biedt een flexibele oplossing voor het volgen van een klassikale training. Met Virtueel en Klassikaal™ kunt u zelf beslissen of u een klassikale training virtueel (vanuit huis of kantoor )of fysiek op locatie wilt volgen. De keuze is aan u! Cursisten die virtueel deelnemen aan de training ontvangen voor aanvang van de training alle benodigde informatie om de training te kunnen volgen.
Data
Naar boven-
- Methode: Virtueel leren
- Datum: 17-19 juni, 2024
- Locatie: Virtueel-en-klassikaal
- Taal: Engels
-
- Methode: Virtueel leren
- Datum: 12-14 augustus, 2024
- Locatie: Virtueel-en-klassikaal
- Taal: Engels
-
- Methode: Virtueel leren
- Datum: 28-30 oktober, 2024
- Locatie: Virtueel-en-klassikaal
- Taal: Engels
-
- Methode: Virtueel leren
- Datum: 02-04 december, 2024
- Locatie: Virtueel-en-klassikaal
- Taal: Engels
Doelgroep
Naar bovenAnyone involved in the design or implementation of a SD-Access solution.
Trainingsdoelstellingen
Naar bovenAfter completing this course you should be able to:
- Explain the role that ISE plays as part of the solution
- Configure AAA services and TrustSec Policy in ISE
- Explain ISE Integration with DNA Center for Policy enforcement
- Know and understand Cisco’s SD-Access concepts, features, benefits, terminology and the way this approach innovates common administrative tasks on today’s networks.
- Differentiate and explain each of the building blocks of SD-Access Solution
- Explain the concept of "Fabric" and the different node types that conform it (Fabric Edge Nodes, Control Plane Nodes, Border Nodes)
- Describe the role of LISP in Control Plane and VXLAN in Data Plane for SD-Access Solution
- Understand TrustSec concepts, deployment details and the way it is used as part of SD-Access Solution for segmentation and Policy Enforcement
- Understand the role of DNA Center as solution orchestrator and Intelligent GUI
- Be familiar with workflow approach in DNA Center - Design, Policy, Provision and Assurance
Inhoud training
Naar bovenModule 1: Cisco ISE Integration for SD Access
- Introduction to Cisco ISE
- Using Cisco ISE as a Network Access Policy Engine
- Introducing Cisco ISE Deployment Models
- Introducing 802.1x and MAB Access: Wired and Wireless
- Introducing Identity Management
- Configuring Certificate Service
- Introducing Cisco ISE Policy
- Configuring Cisco ISE Policy Sets
- Introduction to Cisco TrustSec for segmentation
- The Concept of Security Group (SG) and Security Group Tag (SGT)
- Cisco TrustSec Phases - Classification, Propagation, Enforcement
- Methods for Classification - Static Classification, Dynamic Classification
- Methods for SGT tag propagation - Inline Tagging, SGT Exchange Protocol (SXP)
Module 2: Introduction to Cisco’s Software Defined Access (SD-Access)
- SD-Access Overview
- SD-Access Benefits
- SD-Access Key Concepts
- SD-Access Main Components - Campus Fabric, Wired and Wireless
- Nodes - Edge,Border,Control Plane
- DNA Controller (APIC-EM Controller)
- Introducing Cisco ISE 2.x px
- 2-level Hierarchy - Macro Level: Virtual Network (VN), Micro Level: Scalable Group (SG)
Module 3: DNA Center Workflow
- DNA Center Refresher
- Creating Enterprise and Sites Hierarchy
- Configuring General Network Settings
- Loading maps into the GUI
- IP Address Management
- Software Image Management
- Network Device Profiles
- Introduction to Analytics
- NDP Fundamentals
- Overview of DNA Assurance
Module 4: SD-Access Campus Fabric
- The concept of Fabric
- Node types (Breakdown)
- LISP as protocol for Control Plane
- VXLAN as protocol for Data Plane
Module 5: Campus Fabric External Connectivity for SD-Access
- Enterprise Sample Topology for SD-Access
- Role of Border Nodes
- Types of Border Nodes - Border, Default Border
- Single Border vs. Multiple Border Designs
- Collocated Border and Control Plane Nodes
- Distributed (separated) Border and Control Plane Nodes
Module 6: Implementing WLAN in SD-Access Solution
- WLAN Integration Strategies in SD-Access Fabric - Fabric CUWN, SD-Access Wireless (Fabric enabled WLC and AP)
- SD-Access Wireless Architecture - Control Plane: LISP and WLC, Data Plane: VXLAN, Policy Plane and Segmentation: VN and SGT
- Sample Design for SD-Access Wireless
Labs
- Lab 1: ISE basic setup and Navigating GUI
- Lab 2: Configuring TrustSec in ISE
- Lab 3: Connecting and getting familiar with DNA Center GUI
- Lab 4: Performing SD-Access Design Step in DNA Center
- Lab 5: Integrating ISE and DNA Center for Policy Deployment and Enforcement
- Lab 6: Performing SD-Access Policy Step in DNA Center and ISE
- Lab 7: Performing SD-Access Provision Step in DNA Center
- Lab 8: Performing SD-Access Assurance Step in DNA Center
- Lab 9: Integrating WLAN services through SD-Wireless architecture
- Lab 10: Integrate ISE with Active Directory
- Lab 11: Achieving External Connectivity to remote locations through Border Node
Voorkennis
Naar bovenAttendees should meet the following prerequisites:
- Knowledge level equivalent to Cisco CCNA Routing & Switching - ICND1, ICND2 or CCNABC
- Basic knowledge of Software Defined Networks
- Basic knowledge of network security including AAA, Access Control and ISE - IINS
- Basic knowledge and experience with Cisco IOS, IOS XE and CLI
Examen
Naar bovenRecommended as preparation for the following exams:
- There are currently no exams aligned to this course
- #000000
- SDAISE
- Software Defined Access and ISE Integration for Policy Deployment and Enforcement
- Routing & Switching
- SDAISE | Software Defined Access and ISE Integration for Policy Deployment and Enforcement | Training Course | Cisco.
- Cisco
