You are here
RS0134 - SDA Device Admin (Part 2)
Difficulty Level:
Lab Document:
<Please login to see the content>
Category:
Routing & Switching
Video Download:
Title: RS0134 - Video Download $14.00
The video shows configuration of device administration functionalities on Cisco DNAC. First part of the lab deals with DNAC user roles of local and external RADIUS users. The second half gets into TACACS+ configuration on DNAC managed devices. We will use Cisco ISE as our AAA server for both RADIUS and TACACS+.
Part 2 of this video covers fabric device administration
Topic:
- Local DNAC User Roles
- External DNAC User Roles
- RADIUS Cisco-AV Pair
- TACACS+ Device Admin
About Author
Metha Chiewanichakorn, CCIE#23585 (Ent. Infra, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at labminutes.com, Metha enjoys learning and challenges himself with new technologies.
2 comments
SDA Device Admin
Lets say you have 2 ISE deploements.
If you don't integrate DNAC with ISE TACACS Cluster what functionality will you loose as you have ISE RADIUS Cluster and rather integrate DNAC with it.
I believe you can still add ISE TACACS cluster as generic AAA server in DNAC and provision tacacs configuration?
We will have to create devices on ISE TACACS cluster manually for device admin as well.
SDA Device Admin
Although we haven't tried this, your assumption seems accurate. If you have ISE TACACS delpoyment added as AAA, DNAC wouldn't be able to add network devices but you shouldn't lose any other functionalities since DNAC doesn't do much with TACACS on ISE, only to network devices.