Cisco Software-Defined Access

The definitive Cisco SD-Access resource, from the architects who train Cisco’s own engineers and partners


This comprehensive book guides you through all aspects of planning, implementing, and operating Cisco Software-Defined Access (SD-Access). Through practical use cases, you’ll learn how to use intent-based networking, Cisco ISE, and Cisco DNA Center to improve any campus network’s security and simplify its management.

Drawing on their unsurpassed experience architecting solutions and training technical professionals inside and outside Cisco, the authors explain when and where to leverage Cisco SD-Access instead of a traditional legacy design. They illuminate the fundamental building blocks of a modern campus fabric architecture, show how to design a software-defined campus that delivers the most value in your environment, and introduce best practices for administration, support, and troubleshooting.

Case studies show how to use Cisco SD-Access to address secure segmentation, plug and play, software image management (SWIM), host mobility, and more. The authors also present full chapters on advanced Cisco SD-Access and Cisco DNA Center topics, plus detailed coverage of Cisco DNA monitoring and analytics.

• Learn how Cisco SD-Access addresses key drivers for network change, including automation and security
• Explore how Cisco DNA Center improves network planning, deployment, evolution, and agility
• Master Cisco SD-Access essentials: design, components, best practices, and fabric construction
• Integrate Cisco DNA Center and Cisco ISE, and smoothly onboard diverse endpoints
• Efficiently operate Cisco SD-Access and troubleshoot common fabric problems, step by step
• Master advanced topics, including multicast flows, Layer 2 flooding, and the integration of IoT devices
• Extend campus network policies to WANs and data center networks
• Choose the right deployment options for Cisco DNA Center in your environment
• Master Cisco DNA Assurance analytics and tests for optimizing the health of clients, network devices, and applications

Jason Gooley (CCIEx2 R&S, SP, No. 38759), is Technical Solutions Architect for Cisco’s Worldwide Enterprise Networking Sales team, specializing in SDN, network programmability, and campus LAN, WAN, and data center design. A Cisco Live Distinguished Speaker, he has authored multiple Cisco Press books, develops for the CCIE program, creates Cisco.com training content, and serves on the Program Committee Board for the Chicago Network Operators Group (CHI-NOG). He has 20+ years of industry experience.
Roddie Hasan (CCIE R&S No. 7472) is a Technical Solutions Architect for Cisco’s Worldwide Enterprise Networking Sales team. He has 28 years of networking experience, and has been with Cisco for over 10 years, where he is a subject matter expert on Enterprise Networks. Hasan supports customers and account teams worldwide, with a focus on Cisco DNA Center and SD-Access. Before joining Cisco, he worked in the US Federal and Service Provider spaces. He also specializes in MPLS, Enterprise BGP, and SD-WAN technologies.
Srilatha Vemula (CCIE Security No. 33670) is a Technical Solutions Architect for Cisco’s Worldwide Enterprise Networking Sales team. There, she works with account teams and systems engineers to help Cisco customers adopt Cisco DNA Center, SD-Access, Identity Services Engine, and Cisco TrustSec. Vemula has served in multiple roles at Cisco, including Technical Consulting Engineer and Security Solutions Architect. She led design and implementation of security projects using Cisco flagship security products for key US financial customers.

1. Today’s Networks 2. Introduction to SD-Access 3. Cisco DNA Center 4. SD-Access 5. Cisco ISE and DNAC 6. SD-Access Operation & Troubleshooting 7. Advanced SD-Access Topics 8. Advanced Cisco DNA Center Topics 9. Fabric Assurance 10. Conclusion