The program develops a deep understanding of the SD-Access fabric architecture: edge nodes, border nodes, control plane nodes, and the role of Cisco Catalyst Center as the automation and assurance engine. You will design and deploy complex fabric topologies, integrate external networks through transit and peer nodes, and implement scalable segmentation using VNs and SGTs — all skills that are directly tested in the CCIE Enterprise Infrastructure lab exam.
With extensive hands-on lab access to Cisco Catalyst Center, Catalyst 9000 series switches, and Cisco ISE, you will gain the operational experience needed to manage SD-Access networks in production environments. The course addresses real-world challenges including fabric migration from legacy campus, multi-site connectivity over SD-WAN, and troubleshooting complex segmentation and overlay issues — equipping you to be the definitive SD-Access expert in any organization.
LISP Architecture & Mapping System : LISP protocol overview, EID (Endpoint Identifier) vs RLOC (Routing Locator) separation, Map Server and Map Resolver roles, Map Request/Reply/Register mechanism, and LISP mobility for host database updates.
LISP in SD-Access Fabric : LISP as SD-Access control plane, fabric CP node configuration, anycast gateway with LISP, silent host detection, host mobility across fabric edges, and LISP database synchronization in multi-CP node deployments.
VXLAN Data Plane in SD-Access : VXLAN encapsulation format, VNID to VN and SGT mapping, VXLAN with LISP control plane (EVPN-less), head-end replication vs multicast for BUM traffic, and VXLAN MTU considerations in campus networks.
Anycast Gateway & ARP Suppression : Anycast IP and MAC gateway design, distributed anycast gateway behavior across fabric edge nodes, ARP suppression in LISP-VXLAN fabric, proxy ARP responses from CP node, and mobility event handling.
Course
CCIE Enterprise - Advanced SD-Access
No LMS account? Contact CCN office to get onboarded.
Ratings & Reviews
Average -
4.7★
Gaurav Singh
1 month ago
LISP and VXLAN finally make complete sense
I had struggled to understand LISP's role in SD-Access until this course. The EID/RLOC explanation combined with hands-on Catalyst Center provisioning labs made everything click. The anycast gateway and ARP suppression labs were particularly illuminating.
Divya Krishnan
2 months ago
SGT micro-segmentation content is superb
The TrustSec and SGACL matrix design sections are the best I've seen anywhere. Being able to configure ISE integration and verify SGT tagging end-to-end in the lab gave me the confidence to propose SD-Access segmentation to our security team.
Abhishek Tiwari
3 weeks ago
Comprehensive border node and transit design
The border node integration and transit design sections are very thorough. Understanding the difference between internal and external border nodes and when to use each was exactly the gap in my knowledge that this course filled.
Rekha Mohan
2 weeks ago
Migration planning module is priceless
The phased migration from legacy campus to SD-Access with a co-existence design was a module I could directly apply to our current transformation project. The risk mitigation strategies are very practical and well thought out.
Frequently Asked Questions
While prior DNA Center familiarity is helpful, it is not required. The module starts with DNA Center fundamentals in the context of SD-Access and progressively advances to expert-level fabric provisioning, policy design, and assurance workflows.
Yes. Cisco ISE is fully integrated in the lab environment. Students configure 802.1X, MAB, dynamic SGT assignment, pxGrid integration with Catalyst Center, and SGACL policy push — providing a complete end-to-end SD-Access with identity experience.
SD-Access replaces the traditional VLAN-based segmentation model with an overlay fabric using LISP and VXLAN. Instead of spanning VLANs across switches, SD-Access creates Virtual Networks (VNs) that are isolated by VRF, and uses SGTs for policy within a VN — providing far more scalable and flexible segmentation.
Yes. Multi-site design is covered with hands-on labs using both IP transit and SD-WAN transit between fabric sites. Students configure inter-site host mobility, border node peering, and shared services design in a multi-site topology.
Get Free Counselling
Fill out the form below and our counsellor will get in touch with you shortly.
🔒 Your information is safe with us. No spam, ever.
