Example-1: Basic Fabric Site with No Authentication
This example demonstrates how to configure a basic SD-Access fabric site in Catalyst Center with no authentication requirements. Fabric sites enable Software-Defined Access functionality within designated network areas, providing centralized policy enforcement and micro-segmentation capabilities.
The fabric site configuration includes:
Site hierarchy specification (Global/Canada) for geographic and organizational structure
Authentication template assignment (No Authentication) for simplified initial deployment
Foundation for SD-Access fabric enablement without immediate authentication requirements
Base configuration suitable for proof-of-concept or laboratory environments
---
catalyst_center:
fabric:
fabric_sites:
- name: Global/Canada
authentication_template:
name: No Authentication
pub_sub_enabled: true
Example-2: Campus Fabric Site with Closed Authentication
This example demonstrates how to configure a campus fabric site with closed authentication mode for high-security environments where all network access requires explicit authentication and authorization.
---
catalyst_center:
fabric:
fabric_sites:
- name: Global/Canada
authentication_template:
name: Closed Authentication
pub_sub_enabled: true
Example-3: Multi-Site Fabric Deployment
This example shows how to configure multiple fabric sites across different geographic locations, each with appropriate authentication templates based on local security requirements and organizational policies.
---
catalyst_center:
fabric:
fabric_sites:
- name: Global/North_America/New_York_Office
authentication_template:
name: Closed Authentication
pub_sub_enabled: true
- name: Global/Asia_Pacific/Tokyo_Branch
authentication_template:
name: Open Authentication
pub_sub_enabled: true
- name: Global/Europe/London_Office
authentication_template:
name: Low Impact
pub_sub_enabled: true
- name: Global/Americas/Mexico_City_Branch
authentication_template:
name: No Authentication
pub_sub_enabled: true
Example-4: Fabric Site custom authentication template
This example demonstrates how to configure a fabric site with custom options for authentication templates
---
catalyst_center:
fabric:
fabric_sites:
- name: Global/Corporate/London_Office
authentication_template:
name: Closed Authentication
dot1x_to_mab_fallback_timeout: 30
wake_on_lan: false
number_of_hosts: Unlimited
authentication_order: dot1x
bpdu_guard: false
pub_sub_enabled: true
- name: Global/Corporate/Tokyo_Branch
authentication_template:
authentication_template:
name: Low Impact
dot1x_to_mab_fallback_timeout: 30
wake_on_lan: false
number_of_hosts: Unlimited
authentication_order: mac
bpdu_guard: false
pre_auth_acl:
enabled: true
implicit_action: PERMIT
access_contracts:
- action: PERMIT
port: domain
protocol: UDP
- action: PERMIT
port: bootpc
protocol: UDP
- action: PERMIT
port: bootps
protocol: UDP
pub_sub_enabled: true
Example 5: Fabric Site Reconfiguration
When the IPv4 pool used by a Fabric site is modified, for example when DHCP or DNS server information is updated, the Fabric becomes out of date. The site must be reprovisioned so that the changes take effect.
Cisco Catalyst Center displays a warning on the Fabric site indicating that a reconfiguration is required.
---
catalyst_center:
fabric:
fabric_sites:
- name: Global/Poland/Krakow
reconfigure: true
Location in GUI: Provision » SD-Access » Fabric Sites
Example-1: Basic Fabric Site with No Authentication
This example demonstrates how to configure a basic SD-Access fabric site in Catalyst Center with no authentication requirements. Fabric sites enable Software-Defined Access functionality within designated network areas, providing centralized policy enforcement and micro-segmentation capabilities.
The fabric site configuration includes:
Site hierarchy specification (Global/Canada) for geographic and organizational structure
Authentication template assignment (No Authentication) for simplified initial deployment
Foundation for SD-Access fabric enablement without immediate authentication requirements
Base configuration suitable for proof-of-concept or laboratory environments
---
catalyst_center:
fabric:
fabric_sites:
- name: Global/Canada
authentication_template:
name: No Authentication
pub_sub_enabled: true
Example-2: Campus Fabric Site with Closed Authentication
This example demonstrates how to configure a campus fabric site with closed authentication mode for high-security environments where all network access requires explicit authentication and authorization.
---
catalyst_center:
fabric:
fabric_sites:
- name: Global/Canada
authentication_template:
name: Closed Authentication
pub_sub_enabled: true
Example-3: Multi-Site Fabric Deployment
This example shows how to configure multiple fabric sites across different geographic locations, each with appropriate authentication templates based on local security requirements and organizational policies.
---
catalyst_center:
fabric:
fabric_sites:
- name: Global/North_America/New_York_Office
authentication_template:
name: Closed Authentication
pub_sub_enabled: true
- name: Global/Asia_Pacific/Tokyo_Branch
authentication_template:
name: Open Authentication
pub_sub_enabled: true
- name: Global/Europe/London_Office
authentication_template:
name: Low Impact
pub_sub_enabled: true
- name: Global/Americas/Mexico_City_Branch
authentication_template:
name: No Authentication
pub_sub_enabled: true
Example-4: Fabric Site custom authentication template
This example demonstrates how to configure a fabric site with custom options for authentication templates
---
catalyst_center:
fabric:
fabric_sites:
- name: Global/Corporate/London_Office
authentication_template:
name: Closed Authentication
dot1x_to_mab_fallback_timeout: 30
wake_on_lan: false
number_of_hosts: Unlimited
authentication_order: dot1x
bpdu_guard: false
pub_sub_enabled: true
- name: Global/Corporate/Tokyo_Branch
authentication_template:
authentication_template:
name: Low Impact
dot1x_to_mab_fallback_timeout: 30
wake_on_lan: false
number_of_hosts: Unlimited
authentication_order: mac
bpdu_guard: false
pre_auth_acl:
enabled: true
implicit_action: PERMIT
access_contracts:
- action: PERMIT
port: domain
protocol: UDP
- action: PERMIT
port: bootpc
protocol: UDP
- action: PERMIT
port: bootps
protocol: UDP
pub_sub_enabled: true
Location in GUI: Provision » SD-Access » Fabric Sites
