IADNACA

Monitoring and Troubleshooting

Network Performance using
DNA Centre with Assurance
Lab Guide

Version 2.3.7
Table of Contents
Discovery Lab 0: Access the NterOne Lab....................................................................
 Task 1: Navigate Cisco DNA Center......................................................................
Discovery Lab 1: Navigate Cisco DNA Center..............................................................
 Task 1: Explore Cisco DNA Center........................................................................
Discovery Lab 2: Integrate Cisco ISE with Cisco DNA Center (Instructor
Demo)..............................................................................................................................
 Task 1: Integrate Cisco ISE with Cisco DNA Center............................................
Discovery Lab 3: Design Cisco DNAC Network..........................................................
 Task 1: Design Cisco DNAC Network (Instructor Demo).....................................
 Task 2: Create the Network Hierarchy.................................................................
Discovery Lab 4: Discover Wired Device Manually in the Inventory, Assign
to Site, and Provision....................................................................................................
 Task 1: Distribution Switch Discovery..................................................................
 Task 2: Assigning Devices to a Site.....................................................................
 Task 3: Assigning Shared Services.....................................................................
Discovery Lab 5: Discover Wired Device using Plug and Play (PnP) using
Template Hub.................................................................................................................
 Task 1: Configure the Catalyst 9300 Series Distribution Switch as Seed
Device for Cisco DNA Center PnP Provisioning..................................................
 Task 2: Discover Wired Device using Plug and Play(PnP) using Template
Hub.....................................................................................................................
 Task 3: Verify the Inventory...............................................................................
Discovery Lab 6: Discover and Provision C9800 WLC, Configure Wireless
SSIDs and Network Profiles........................................................................................

Table of Contents | © Cisco Systems, Inc. IADNACA Lab Guide

  Task 1: C9800 WLC Discovery..........................................................................
 Task 2: Assigning WLC Device to a Site............................................................
 Task 3: Design Enterprise Wireless SSIDs for Employee and Contractor.........
 Task 4: C9800 WLC Provision...........................................................................
 Task 5: Assigning APs to a Site.........................................................................
 Task 6: C9800 WLC Verification........................................................................
Discovery Lab 7: Configure C9800 WLC Using Template Hub................................
 Task 1: Verify any existing login banner using Command Runner....................
 Task 2: Configure C9800 WLC Using Template Hub........................................
 Task 3: Verification of CLI output via Cisco DNAC............................................
Discovery Lab 8: Configure Cisco DNA Center Assurance Telemetry
Profiles and Apply to Devices....................................................................................
 Task 1: Configure Cisco DNA Center Assurance Telemetry Profiles and
Apply to Devices................................................................................................
Discovery Lab 9: Generate and Monitor Application Traffic on DNAC for
Clients...........................................................................................................................
 Task 1: Connect to Console of Lab Devices and Activity Checks on Wired
Client..................................................................................................................
 Task 2: Activation of Client on Wireless-PC and Generation of Application
Traffic.................................................................................................................
 Task 3: Monitor Application Traffic on Cisco DNA Center – Assurance............
Discovery Lab 10: Application Visibility and Control on DNAC..............................
 Task 1: Verify Application Visibility Packages on DNAC....................................
 Task 2: Enable Controller Based Application Recognition on 9800 WLC
(CBAR)...............................................................................................................
 Task 3: Create Custom Application Policy (Instructor Demo)............................
 Task 4: Deploy Custom Application Policy.........................................................
 Task 5: Test Custom Application Policy.............................................................
Discovery Lab 11: DNAC Integration with Umbrella.................................................
 Task 1: Verify Cisco Umbrella Dashboard for Your Corporate Subnet..............
 Task 2: Upload Umbrella Certificates on DNAC (Instructor Demo)...................
 Task 3: Create DNS Policies on Cisco Umbrella (Instructor Demo)..................
 Task 4: DNAC Integration with Cisco Umbrella (Instructor Demo)....................
 Task 5: Update Global DNS on WLC.................................................................
 Task 6: Provision WLC with Cisco Umbrella Policies........................................
 Task 7: Test Cisco Umbrella Policy...................................................................

Table of Contents | © Cisco Systems, Inc. IADNACA Lab Guide

 Discovery Lab 12: Assurance Dashboards – Health, Issues and Wi-Fi 6 on
DNAC.............................................................................................................................
 Task 1: Connect to Console of Lab Device and Create Issue from Access
Switch.................................................................................................................
 Task 2: Monitoring Issues on Cisco DNA Center – Assurance..........................
 Task 3: Modify Issue Settings in Cisco DNA Center Assurance........................
 Task 4: Configure Syslog Server and Integrate with DNAC (Instructor
Demo).................................................................................................................
 Task 5: Wi-Fi 6 Readiness Check......................................................................
Discovery Lab 13: Intelligent Packet Capture...........................................................
 Task 1: Intelligent Packet Capture Using Wireless Client Details......................
 Task 2: Intelligent Packet Capture Using 91xx AP.............................................
Discovery Lab 14: 1800s AP as Sensor.....................................................................
 Task 1: Configure Cisco 1800s AP as a Sensor (Instructor Demo)...................
Discovery Lab 15: Application Visibility with Thousand Eyes and DNAC.............
 Task 1: Upload ThousandEyes Agent Package on DNAC (Instructor
Demo).................................................................................................................
 Task 2: Deploy ThousandEyes Agent Package on 9300 Switch from
DNAC.................................................................................................................
 Task 3: Perform Test from ThousandEyes Dashboard......................................
Discovery Lab 16: AI Endpoint Analytics on DNAC.................................................
 Task 1: Verify AI Packages on DNAC Appliance...............................................
 Task 2: Enable Cisco AI Analytics on DNAC and Connect Data Source...........
 Task 3: Verify Endpoint Data and Export to ISE for Policy................................
 Task 4: Create and Verify ISE Authorization Policies Based on Endpoint
Analytics.............................................................................................................
Discovery Lab 17: Reporting on Cisco DNAC...........................................................
 Task 1: Reports for Client-Client Summary........................................................
 Task 2: Reports for Executive Summary............................................................
 Task 3: Reports for Inventory.............................................................................
Discovery Lab 18: IOS-XE Device Upgrade / Downgrade Using SWIM via
DNAC.............................................................................................................................
 Task 1: IOS Upgrade / Downgrade of Device via Cisco DNA Center................
Discovery Lab 19: DNAC Configuration Backup on External Server
(Instructor Demo).........................................................................................................

Table of Contents | © Cisco Systems, Inc. IADNACA Lab Guide

  Task 1: DNAC Configure Backup on External Server........................................

Table of Contents | © Cisco Systems, Inc. IADNACA Lab Guide

Discovery Lab 0:
Access the NterOne Lab
In this this activity, you will access the NterOne lab and log in to your assigned pod with the credentials
supplied by your instructor.

Activity Objectives
In this activity, you will access the NterOne lab environment.
You will use the following topology in this lab. Note that all Shared devices are shared with other
student pods in your class.

Discovery Lab 0 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 1

Discovery Lab 0 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 2
Task 1: Navigate Cisco DNA Center
In this task, you will access the NterOne lab from your computer with the credentials supplied by your
instructor.
The terms rack and pod refer to the switches that you will access. Your instructor supplies the rack and
pod numbers. Pay close attention to them, as you will use them in many of the following lab steps.
Enter the credentials and URL in the following tables, as assigned by your instructor:

Username: Password:

Access URL:

https://my.Labtyme.com

Rack Number: Pod Number:

DNA Center IP: ISE IP:

Activity Procedure
Complete these steps:
Step 1 From your PC, browse to the lab URL that your instructor provides. You must
complete all the lab steps within this Labtyme lab environment. You should see
the following login screen:

Discovery Lab 0 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 3

 Step 2 Enter your instructor-provided credentials and click on Login.
Step 3 Note the three different virtual machines (VMs) that you have been assigned.
This example is for Pod 20, Rack 1. Note your three assigned VMs with names
that are based upon your assigned pod and rack number.

Note The following devices are only used in this SDAINT class.

Discovery Lab 0 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 4

 Step 4 Each device in your pod is listed alphabetically under ALL CONNECTIONS in
the lower half of the screen.

Note For your convenience, devices that you recently accessed appear under RECENT CONNECTIONS
at the top of the screen.

Discovery Lab 0 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 5

 Step 5 The menu in the upper-right shows the username you are logged in under. Click
the down arrow to open a drop-down menu and note the options.
Do not log out now.

Step 6 Try opening a session. Right-click your Admin-PC desktop and select Open
Link in New tab. You will perform most lab steps and access Cisco DNA Center
from this Admin-PC.
Step 7 The connection opens in a new tab. Log in to the device. The Admin account
password for Admin-PC is ISEisC00L (use zeros not the letter O in the word
Cool).

Activity Verification
You have completed this task when you obtain the following results:
 You successfully logged in to the NterOne lab environment.
 You accessed a device through RDP or VNC.

Discovery Lab 0 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 6

SD-Access Lab Work Flow
This Lab Guide assumes that the switching underlay is provisioned and that Cisco DNA Center v2.3.7
and Cisco ISE v3.1 are previously installed and integrated. For simplicity, this guide walks you through
a production deployment scenario.
1. The lab begins with a quick overview of the SD-Access apps, tools, and Cisco DNA Center.
2. Use Cisco DNA Center to discover underlay devices and view them with the Discover and
Inventory tools.
3. Use Cisco DNA Center to display the devices with the Topology tool.
4. Use the Design app to create sites where you define common attributes, resources, and
credentials to reuse during various Cisco DNA Center work flows.
5. See a quick overview of the Policy app, verification of the Cisco DNA Center, and ISE
integration.
6. Create a virtual network in the Policy app with network-level segmentation. During this step,
groups learned from ISE will be associated to the virtual network, creating micro-level
segmentation.
7. Use the Policy Administration process to create centralized security policies for the University
scenario. The policies are verified with ISE.
8. Return to Cisco DNA Center to provision the discovered devices to a site.
9. Provision the overlay fabric.
10. Onboard end hosts.
11. Modify Windows clients to use Dot1x authentication to join the overlay.
12. Test IP connectivity and security policy enforcement.
13. Configure and verify intra-overlay and inter-overlay routing by using an external router.

Discovery Lab 0 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 7

Discovery Lab 1:
Navigate Cisco DNA Center
In this lab, you will get acquainted with Cisco DNA Center.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 8

Task 1: Explore Cisco DNA Center
Cisco DNA Center GUI provides end-to-end network visibility and uses network insights to optimize
network performance and deliver the best user and application experience.

Activity Procedure
Complete the following steps:
Step 1 From your laptop / PC browser navigate to https://my.labtyme.com and access
your Admin-PC.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 9

 Step 2 Log in to the Cisco DNAC GUI, navigate to https://<<DNAC IP Address>>
(DNAC IP Address and credentials will be provided by your instructor) and log in
with the provided credentials.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 10

 Note The Cisco DNA Center login screen is dynamic. It may have a different background. When you are
first accessing the login page, the browser may appear to freeze for up to approximately twenty
seconds. This delay is directly related to this lab environment and will not happen in production. It
does not impact any configuration or actual performance of DNA Center. The Cisco DNA Center
SSL certificate may not be automatically accepted by your browser. If so, use the advanced
settings to allow the connection.

Step 3 Once you log into DNA Center, in the upper-left is the square navigation button,
sometimes referred to as the hamburger button ( ).

Step 4 View the Cisco DNA Center version by clicking on the question mark at the
top-right and then click on About.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 11

 Step 5 Notice the current Cisco DNA Center controller in this lab environment is version
2.3.5.3-70194.

Step 6 Click the down arrow next to Packages to view the various packages that make
up Cisco DNA Center. In addition to this information, you can navigate to the
view the Serial Number and Member ID .

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 12

 Step 7 Close the About pop-up window by clicking on the Cisco DNA Center home
page.
The Cisco DNA Center main screen is divided into these main areas:
 Assurance Summary

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 13

  Network Snapshot

 Tools

These areas contain the primary components for creating and managing the
solutions that are provided by the Cisco DNA Center.
Step 8 Click on the square icon (hamburger button) at the top-left of the Cisco DNA
Center.

Step 9 You will see Cisco DNA Center Workflows and other navigation options will
appear in the left side of your window.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 14

 Step 10 Click on Design and explore its sub options.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 15

 Design

Network Hierarchy Network hierarchy represents your network's geographical locations. The
hierarchical organization enables you to easily apply design settings or
configurations to a specific hierarchical element. For example, you can
apply design settings to an entire area or to only a floor.

Network Settings You can create network settings that become the default for your entire
network. There are two primary areas from which you can define the
settings within your network: Global Settings and Site Settings.

Image Repository Cisco DNA Center stores all of the software images, software maintenance
updates (SMUs), subpackages, ROMMON images, and others for the
devices in your network. Image Repository provides the following functions:
n Image Repository: Cisco DNA Center stores all the unique software
images according to image type and version.
n Provision: You can push software images to the devices in your

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 16

 Design

network.

Network Profiles Network Profiles allow you to configure settings and apply them to a
specific site or group of sites. You can create network profiles for various
elements in Cisco DNA Center such as: Assurance, Firewall, Routing,
Switching, and others.

Authentication Template Authentication Template is a predefined set of configurations that are

retrieved from Cisco ISE.

Step 11 Click on the Policy and explore its sub options.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 17

 Policy

AI Endpoint Analytics Cisco AI Endpoint Analytics is an endpoint visibility solution that helps you
identify and profile endpoints and Internet of Things (IoT) devices. The
Cisco AI Endpoint Analytics engine enables you to assign labels to
endpoints, using the telemetry information received from the network from
various sources.

Group-Based Access Group-Based Access Control is a feature within Cisco DNA Center that
Control provides advanced access control capabilities based on user groups and
attributes. It allows you to define and enforce access policies across your
network infrastructure, ensuring that users and devices have appropriate
access privileges while maintaining security.

IP and URL Based Access IP and URL-Based Access Control is a security feature or capability within
Control the Cisco DNA ecosystem that allows you to control access to network
resources based on the IP addresses and URLs (Uniform Resource
Locators) associated with devices and applications. This feature can be
crucial for enhancing network security and managing user access to
specific services.

Application QOS Application Quality of Service (QoS) is a critical aspect of network

management, aimed at ensuring the consistent and appropriate delivery of
network traffic for different applications. DNAC includes QoS features to
help manage application performance and network traffic prioritization.

Traffic Copy Using Cisco DNA Center, you can set up an Encapsulated Remote
Switched Port Analyzer (ERSPAN) configuration such that the IP traffic flow
between two entities and copied to a specified destination for monitoring or
troubleshooting.

Step 12 Click on the Provision and explore its sub options.

Note At this stage of the lab we will be exploring a few sub options of the DNAC workflows.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 18

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 19
 Provision

NETWORK DEVICES

Inventory The Inventory function retrieves and saves details, such as host IP
addresses, MAC addresses, and network attachment points about devices
in its database.
After the initial discovery, Cisco DNA Center maintains the inventory by
polling the devices at regular intervals.

Plug and Play The Cisco Network Plug and Play provides a simple, secure, and unified
solution for enterprise network customers to ease new branch deployment
or campus rollouts.
The solution provides a unified approach to provision enterprise networks
comprised of Cisco routers, switches, and wireless devices with a near zero
touch deployment experience.

LAN Automation Cisco LAN Automation simplifies network operations thereby freeing IT staff
from time-consuming, repetitive network configuration tasks, and creates a
standard, error-free underlay network. LAN automation accelerates building
the underlay network without the traditional network planning and
implementation process.

Inventory Insights The Inventory Insights displays devices that have configuration
inconsistencies with other directly-connected devices. It also displays
devices that are misconfigured, as compared with the Cisco DNA
Center best practice recommendations.

SD-ACCESS

Fabric Sites A Fabric Site is an independent fabric area with a unique set of network
devices: control plane, border, edge, wireless controller, and ISE PSN.
Different levels of redundancy and scale can be designed per site by
including local resources: DHCP, AAA, DNS, Internet, and others.

Virtual Networks The Virtual Networks menu centralizes and enhances workflows and
information necessary to configure, understand and maintain Layer 2 and
Layer 3 virtual networks in Cisco SD-Access. From the Virtual Networks
menu you can create, update, and delete Layer 2 virtual networks, Layer 3
virtual networks, and Anycast gateways.

Transits Transits lists the created transit and peer networks. Transit and peer
networks can be created, updated, and deleted.

Step 13 Click on Assurance and explore its sub options.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 20

 Assurance

DASHBOARDS

Health Cisco DNA Center Assurance presents detailed metrics, data, and history
on clients, including wired and wireless client health.

Issues and Events The dashboard provides a contextual view of events for devices (routers,
switches, wireless controllers, and APs). Instead of having to search for
events triggered by devices that are connected to other devices involved in
an event, Assurance provides these details for you.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 21

 Assurance

Wi-Fi 6 Use the Wi-Fi 6E and 6 readiness feature to determine the following:
n The percentage of clients that are Wi-Fi 6E and 6 capable.
n The percentage of AP infrastructure that is Wi-Fi 6E and 6 ready.
Based on the preceding information, recommendations are provided about
the actions that you can take to experience the full benefits of the Wi-Fi 6E
and 6 network.

Rogue and aWIPS The Rogue Management application helps you monitor threats from
unauthorized access points (APs). You can access the Rogue
Management functionality as a dashboard within Cisco DNA Assurance in
the Cisco DNA Center GUI. Because the Cisco Adaptive Wireless Intrusion
Prevention System (aWIPS) is integrated with Cisco DNA Center, you can
monitor the aWIPS signatures within the Rogue and aWIPS dashboard.

POE The Cisco DNA Center Power over Ethernet (PoE) enables you to monitor
the PoE-capable devices in your network.

Dashboard Library You can create custom dashboards for monitoring your network.
Dashboards contain one or more dashlets, which include charts, tables,
geographic maps, and other types of information. Any custom dashboard
that you create is visible only to your user account. Other users cannot see
your custom dashboards.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 22

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 23
 SETTINGS

Issue Settings Use "User Defined Issue" to create your own syslog-based issues that are
tailored to your own needs and receive notifications on demand.

Health Score Settings The health score can be customized based on device type. The network
device's health score is the lowest score of all included KPIs. To disable a
KPI from impacting the overall device health, you can exclude it from the
health score calculation.

Site Analytics Settings The site analytics can be customized for each critical client performance
metric. Changes here are reflected in the Site Analytics metrics.

Intelligent Capture Settings Intelligent Capture provides support for a direct communication link
between Cisco DNA Center and access points (APs), so each of the APs
can communicate with Cisco DNA Center directly. Using this channel,
Cisco DNA Center can receive packet capture data, AP and client statistics,
and spectrum data.

SSID Monitoring Settings By default, Cisco DNA Assurance monitors all SSIDs. However, you can
enable or disable SSID monitoring of specific SSIDs without impacting the
SSID configuration or wireless connection to these SSIDs.

Step 14 Click on Tools and explore its sub options.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 24

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 25
 Tools

Discovery The Discovery feature scans the devices in your network and sends the list
of discovered devices to inventory. This also works with the Device
Controllability feature to configure the required network settings on devices,
if these settings are not already present on the devices.

Topology The Topology window displays a graphical view of your network. Using the
Discovery settings that you have configured, Cisco DNA Center discovers
the devices in your network and assigns a device role to them. Based on
the device role assigned during discovery (or changed in Device Inventory),
Cisco DNA Center creates a physical topology map with detailed device-
level data.

Command Runner Command Runner is the feature in Cisco DNA Center that allows you to
execute commands on the devices managed by Cisco DNA Center.

License Manager The License Manager feature helps you visualize and manage all of your
Cisco product licenses, including Smart Account licenses.

Step 15 Click on Platform and explore its sub options.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 26

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 27
 Platform

Overview Overview provides an overview of the Cisco DNA Center platform and its key
features.

Manage The Cisco DNA Center platform GUI provides a Manage drop-down menu option
that provides access to the following features:
n Bundles: Access to bundles that you can use to integrate Cisco DNA Center
with your own applications or to enhance the performance of Cisco DNA
Center itself. Bundles are comprised of groupings of APIs, events, integration
flows, data services, or applications.
n Configurations: Ability to configure global settings for a single bundle or
across multiple bundles for a custom platform experience.

Step 16 Click on Activities and explore its sub options.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 28

 Activities

Audit Logs Audit logs are created to capture critical activities, such as when configuration
changes were requested, when the configuration changes were executed, and if
there were errors that occurred during the configuration.

Tasks Monitor and manage all your scheduled network operations in one place. You can
also access a quick view of recent activities from any page of Cisco DNA Center
with the keyboard shortcut – Q + A.

Step 17 Click on Reports and explore its sub options.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 29

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 30
 Reports

Generated Reports Perform this procedure to download, review, edit, duplicate, or delete a previously
generated report.

Report Templates The Report Templates window opens and displays the supported reporting
categories in a slide-in pane. Each category is represented by a link. Click a link to
view only the supported reports for that category.

Usage Insights Usage Insights is a customized report that shows the productivity improvement of
network operations with Cisco DNA Center and comparative ROI insights with a
traditional NMS.

Step 18 Click on System > System 360.

System

System 360 The System 360 tab provides detailed information about the app stacks and
services running on Cisco DNA Center. You can use this information to assist in
troubleshooting issues with specific applications or services.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 31

 System

Software Management Software Management displays the status of application or system updates.

Backup and Restore Backup and Restore displays the status of the most recent backup.

Settings To start using Cisco DNA Center, you must first configure the system settings so
that the server can communicate outside the network, ensure secure
communications, authenticate users, and perform other key tasks. Use the
procedures described in this chapter to configure the system settings.

System Health You can monitor the health of the physical components on your Cisco DNA
Center appliances and keep track of any issues that may occur.

Data Platform Data Platform provides tools that can help you monitor and troubleshoot Cisco DNA
Center applications. Data Platform displays synthesized data from various inputs to
help you identify patterns, trends, and problem areas in your network.

Users and Roles A user profile defines a user's login, password, and role (permissions).You can
configure both internal and external profiles for users. Internal user profiles reside
in Cisco DNA Center and external user profiles reside on an external AAA server.
A default user profile with SUPER-ADMIN-ROLE permissions is created when you
install Cisco DNA Center.

Step 19 Hover your mouse on Admin and explore pop-up options.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 32

 Admin

Sign Out Log out of DNA Center.

My Profile and Settings Provides your account information. You can change your password and add an
email address for email notification.

Discovery Lab 1 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 33

Discovery Lab 2:
Integrate Cisco ISE with Cisco
DNA Center (Instructor Demo)
Overview
In this lab, you will integrate Cisco ISE with Cisco DNA Center appliance. This action is necessary
when your Cisco ISE instance is acting as an AAA server for your network authentication, authorization,
and accounting services.

Discovery Lab 2 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 34

Task 1: Integrate Cisco ISE with Cisco DNA Center
Activity Procedure
Complete the following steps:
Step 1 From your laptop / PC browser, navigate to https://my.labtyme.com and access
your Admin-PC.

Discovery Lab 2 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 35

 Step 2 Log in to the Cisco ISE GUI and navigate to https://<<ISE IP Address>>
(ISE IP Address and credentials will be provided by your instructor). Log in with
the credentials provided by your instructor.

Discovery Lab 2 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 36

 Step 3 Click on the hamburger button ( ) in the top-left corner of your ISE window.

Step 4 Select Administration and navigate to System > Deployment.

Discovery Lab 2 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 37

 Step 5 You may get a warning message to update the administration role in ISE.
Click on OK.

Step 6 Prepare the ISE VM for the integration with Cisco DNA Center, click on the
highlighted hostname (ise67). Please note that the hostname may or may not be
the same.

Discovery Lab 2 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 38

 Step 7 Write down or copy the FQDN name, this will be used later during the steps to
integrate Cisco ISE with Cisco DNAC.

Step 8 Scroll down on the details and verify that the PxGrid option is enabled. If you
need to change the configuration to enable PxGrid, be sure to click on the Save
icon in the lower-right corner.

Discovery Lab 2 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 39

 Step 9 From the Administration menu, under pxGrid Services, select the Client
Management link. Verify that there are no clients listed.

Discovery Lab 2 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 40

 a. Log in to the Cisco DNAC GUI, navigate to https://<<DNAC IP Address>>
(DNAC IP Address and credentials will be provided by your instructor) and
log in with the provided credentials.
Step 10 Choose the System menu icon and then click on Settings.

Discovery Lab 2 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 41

 Step 11 Scroll down and browse to Authentication and Policy Servers under External
Services.

Step 12 Hover your mouse cursor over the Add button on the left side of the
Authentication and Policy Servers pane to add the ISE server to the
configuration.

Step 13 Select ISE from the drop-down list.

Discovery Lab 2 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 42

 Step 14 Enter the following configuration in the Cisco DNA Center GUI to integrate with
Cisco ISE. Scroll down and open the Advanced Settings pane and verify that
Connect to pxGrid is selected. When you are finished, click on Add.
The correct IP address is provided with the Lab Access email. The following
information is an example:
 Server IP Address: <<ISE IP Address>> (ISE IP Address will be provided by
the instructor.)
 Shared Secret: ISEisC00L
 Username: admin
 Password: ISEisC00L
 FQDN: Use the FQDN details noted in Task 1, Step 7.
 Advanced Settings: ON
 Connect to pxGrid: Checked
 Use Cisco DNA Center Certificate for pxGrid: Leave Un-Checked
 Protocol RADIUS: Checked (Leave TACACS Protocol Un-Checked)

Note The following figure shows an example ISE IP address and FQDN. Yours will be different for your
assigned pod.

Discovery Lab 2 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 43

Discovery Lab 2 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 44
 You will get a certificate warning, click on Accept.

Discovery Lab 2 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 45

 Step 15 Wait for the process to complete. Once all four processes are completed and
have turned green, click on Close at the bottom of the screen.

Discovery Lab 2 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 46

 Step 16 Check the status of the newly added ISE (10.10.144.67). The status should be
ACTIVE.

Discovery Lab 2 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 47

 Step 17 Open Cisco ISE GUI from the Administration menu, select the pxGrid Services
and select Client Management.

Step 18 At this point, the pxGrid client should show a status of Enabled.

Note In the latest DNAC and ISE versions you may see pxgrid_client_ 16xxxxx entries as Enabled so
you don’t need to approve it. Please refresh the screen if you don’t see the pxgrid client entry for
DNAC.

Discovery Lab 2 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 48

Congratulations! Integration of Cisco ISE with Cisco DNA is successfully complete.

Discovery Lab 2 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 49

Discovery Lab 3:
Design Cisco DNAC Network
Introduction
With Cisco DNA Center, we are changing how networks are designed, deployed, and managed. One of
the main advantages of Cisco DNA Center over traditional management systems is massive
simplification through both guided workflows and abstractions. These guided workflows are based on
business intent rather than feature and CLI-based configuration.
Cisco DNA Center offers four main applications to configure and manage your network: Design,
Provision, Policy, and Assurance.
In this exercise, you will configure the network hierarchy.
When you deploy Cisco DNA Center, you typically take the following steps:
 Define the hierarchy of the organization, including sites, buildings, and floors.
 Enter the device credentials for your network devices and use those credentials to discover the
network devices.
To configure the global network services parameters and network settings such as DNS, NTP, and
AAA servers. You will integrate the telemetry collectors, including SNMP and Syslog servers, with the
Cisco DNA Center appliance for DNA Center Assurance purposes.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 50

Task 1: Design Cisco DNAC Network (Instructor
Demo)
Activity Procedure
Complete the following steps:
Step 1 Log into the Cisco DNAC and click on Cisco DNA Center icon ( ) from the top-
left corner. Then, click on Design > Network Settings.

Step 2 Select the Global location from the Network Hierarchy panel.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 51

 Step 3 Configure the following global site network services for the Global network
hierarchy location, as follows:
 AAA server
 DHCP Server: Use your DNA Center IP
 Domain Name: isesda.com
 Primary DNS Server: Use your DNA Center IP
 NTP Server : Use your DNA Center IP
 Time Zone: GMT

Step 4 Click Network. Select the Global level in the hierarchy (left pane). In the upper-
right corner, click on + Add Servers.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 52

 Step 5 Check the check boxes for AAA and NTP and click OK.

Step 6 Under the AAA Server section, check the box next to Client/Endpoint. The
box changes to and additional settings display.

Field Value

Servers ISE

Protocol RADIUS

IP Address of your integrated ISE

PAN
Server.

IP Address of your integrated pod

Primary Server
ISE Server.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 53

 Field Value

Shared Secret ISEisC00L

Step 7 Scroll down and select IP address 10.10.144.67 from the drop-down menu in ISE
and Radius options.

Step 8 To add Syslog and SNMP destination, use the Telemetry link at the top of the
Design > Network Settings page.
Step 9 In this lab, Cisco DNA Center is the destination for both Syslog and SNMP
traffic.
Step 10 Validate and make sure Use Cisco DNA Center as SNMP trap server and Use
Cisco DNA Center as syslog server and are both enabled.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 54

 Step 11 Scroll down and make sure you click on the check boxes for Enable Cisco DNA
Center Wired Endpoint Data Collection at This Site and Enable Wireless
Telemetry. Click on Save.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 55

 Step 12 From the Cisco DNA Center GUI main menu, navigate to Design > Network
Settings.

Step 13 Click on Device Credentials. Click on Manage Credentials for each credential
to add the appropriate values.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 56

 Step 14 Hover your mouse cursor over Add and click on CLI to enter the following CLI
Credentials for the dnaadmin user:
 Name: dnaadmin
 Username: dnaadmin
 Password: ISEisC00L
 Enable Password: ISEisC00L
 Ensure that Assign credential to site Global is selected.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 57

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 58
 Step 15 Hover your mouse cursor over Add, and under the SNMPv2c Read and SNMP
v2c Write credentials use the appropriate drop-down “One by One” and enter
the following values:

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 59

 Step 16 Add the following global SNMP credentials and click on Save.
Select the
SNMP Community Type/ Name/
checkbox Assign Credentials Description
Read Community String
credential to site
Global. SNMPv2c Read public public

SNMPv2c Write private private

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 60

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 61
 Step 17 Ensure that Assign credential to site Global is selected and click on Save for
each set of credentials.
Make sure to enter the same credentials – this is important for the other lab
steps to work properly.
Step 18 Verify in the Cisco DNA Center GUI that you can see the CLI, Read and Write
SNMP global credentials that you have configured.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 62

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 63
Task 2: Create the Network Hierarchy
Using Cisco DNA Center, create a network hierarchy of areas, buildings, and floors that reflect the
physical deployment. In later steps, discovered devices are assigned to buildings so that they display
hierarchically in the topology maps with the device role defined earlier in the Inventory tool.
Areas are created first. Within an area, subareas and buildings are created. To create a building, the
street address must be known to determine the coordinates and thus place the building on the map.
Alternatively, use latitude and longitude coordinates without the street address. Floors are associated
with buildings and support the importation of floor maps. For SD-Access Wireless, floors are mandatory
and where APs are assigned, as clarified in later steps. Buildings/Floors that you create in these steps
each represent a fabric site in the later Provisioning Application procedures.

Activity Procedure
Complete the following steps to create the network hierarchy:
Step 1 From the main Cisco DNA Center dashboard, click the hamburger ( ) menu
icon. Navigate to Design > Network Hierarchy.

Note You may receive the warning below that the map is not available. This can be ignored.

Step 2 Under the Global Hierarchy hover the mouse cursor over the three dots and
click on Add Area.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 64

 Step 3 Complete the following details in the pop-up window for Add Area.
 Area Name: RrPp (r is your Rack number and p is your Pod number)
 Parent: Global
Click Add.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 65

 Step 4 Under the Global Hierarchy > RrPp, hover the mouse cursor over the three dots
and click on Add Building.

Step 5 Provide the following parameters within the Add Building dialog box:
 Building Name: RrPp-BLDG1 (where r is your Rack number and p is your
Pod number)
 Parent: RrPp
 Address: 170 West Tasman Drive, San Jose, California. The latitude and
longitude will populate automatically. Make sure to add this location exactly
as shown.
Click on Add.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 66

 Step 6 Hover your mouse cursor on the RrPp-BLDG1 building you just created, three
blue dots will appear. Hover the mouse cursor on the gear icon with three blue
dots, and in the drop-down menu click on Add Floor.

Note You may or may not get a Geo Map is unavailable warning in the activity below.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 67

 Step 7 Enter the floor as RrPp-Floor1 and click Upload file.

Step 8 Navigate to your pod Desktop and choose the pre-created office.png file.
Click on Open.

Step 9 Click Add and verify you can see your new Office Floor.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 68

 Step 10 Hover your mouse cursor on the RrPp-BLDG1 building again, three blue dots
will appear. Hover the mouse cursor on the gear icon with three blue dots, and
in the drop-down menu click on Add Floor

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 69

 Step 11 Enter the floor as RrPp-Floor2 and click Upload file.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 70

 Step 12 Navigate to your pod Desktop and choose the pre-created office.png file.
Click on Open.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 71

 Step 13 Click Add and verify you can see your new Office Floor.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 72

 Step 14 On the same page you can verify the Hierarchy you have created.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 73

 Step 15 In the Cisco DNA Center GUI, navigate to the Design > Network Settings >
Network page.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 74

 Step 16 Note that there is an icon ( ) beside each setting to indicate those settings are
inherited from a parent object. Make sure you click on your Area RrPp and then
click on Save.

Step 17 Click on RrPp-BLDG1 and then click on Save.

Step 18 Click on RrPp-Floor1 and then click on Save.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 75

 Step 19 Click on RrPp-Floor2 and then click on Save.

Step 20 Navigate to the Design > Network Settings > Telemetry page.
Step 21 Select RrPp Area and click on Save.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 76

 Step 22 Select RrPp-BLDG1 and click on Save.

Step 23 Select RrPp-Floor1 and click on Save.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 77

 Step 24 Select RrPp-Floor2 and click on Save.

Step 25 In the Cisco DNA Center GUI, navigate to the Design > Network Settings >
Device Credentials page and verify that the global settings are being inherited
for the selected the RrPp area.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 78

 Step 26 Repeat the same step for the RrPp-BLDG1 to verify the device credentials are
inherited.

Step 27 Repeat the same step for RrPp-Floor1 and RrPp-Floor2 to verify the device
credentials are inherited.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 79

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 80
Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 81
Discovery Lab 4:
Discover Wired Device
Manually in the Inventory,
Assign to Site, and Provision
Overview
Cisco DNA Center is used to discover and manage the underlay network devices. To discover
equipment in the network, the Appliance must have IP reachability to these devices. CLI and SNMP
management credentials must be configured on them. Once discovered, the devices are added to
Cisco DNA Center’s inventory, allowing the controller to make configuration changes through
provisioning.
The following steps show how to initiate a discovery job by supplying an IP address range or multiple
ranges for scanning for network devices. IP address range discovery provides a small constraint to the
discovery job which may save time. Alternatively, by providing the IP address of an initial device for
discovery, Cisco DNA Center can use Cisco Discovery Protocol to find neighbors connected to the
initial device.
In this lab, you will achieve the following objective:
 Discover, assign to site, and provision the distribution switch.
You will discover the 9300 distribution switch for your respective rack and pod number. Please
note that r and p is your rack and pod number, respectively.
— RrPp-SW-Distribution (R2P20-SW-Distribution)

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 82

Activity Objectives
In this activity, you will discover devices to add to the DNA Center Inventory. You will use the following
devices and values in this lab. (rp: r is your rack number and p is your assigned pod number)

Device Name IP Address or URL Username Password

DNA Center Provided by instructor admin ISEisC00L

ISE Provided by instructor admin ISEisC00L

RACK 1 and RACK 2

Distribution switch (9300) 10.146.rp.1 dnaadmin ISEisC00L

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 83

Topology

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 84

Task 1: Distribution Switch Discovery

You will use the DNA Center Discovery tool to add your distribution switch to inventory. Be sure to pay
close attention to your assigned rack and pod number. You are all sharing the same physical DNA
Center appliance.

Activity Procedure
Complete the following steps:
Step 1 Log into the Cisco DNAC and click on Cisco DNA Center icon ( ) from the top-
left corner and choose Tools > Discovery.

Step 2 Click on Add Discovery.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 85

 Step 3 Click on Next.

Note You use the Discovery tool to find existing underlay devices by using Cisco Discovery Protocol or
IP address ranges.

Step 4 Enter the following fields under the Discover Devices page.
 Discovery Job Name: RrPp-Device (r is your assigned rack number, p is
your assigned pod number)
Select IP Address Range and enter the range for your assigned pod and rack as
per the table below and click on Next.

Device Name IP Address/Range

RACK 1 and RACK 2

Distribution switch (9300) 10.146.rp.1

Note The IP address that you will use for discovery is for interface Vlan1046 that you verified on the
9300 switches. If the IP does not match with the table, please inform the instructor.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 86

 Note These screen captures are for Rack 2 Pod 20. Be sure to always use only your assigned Rack and
Pod Number.

Step 5 In the Provide Credentials page, select CLI and the click on the check box for
EXISTING GLOBAL CLI CREDENTIALS.

Step 6 Select SNMPv2c Read and click on the check box EXISTING GLOBAL
SNMPV2C READ CREDENTIALS.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 87

 Step 7 Select SNMPv2c Write and click on the check box EXISTING GLOBAL
SNMPV2C READ CREDENTIALS.

Step 8 Click on Next.

Step 9 In Advanced Settings page, make sure the SSH option is enabled and click on
Next.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 88

 Step 10 Select the radio button for Skip site assignment for now and click on Next.

Step 11 Make sure the radio button option for Now is selected and click on Next.

Step 12 In the Summary page, review your selections and to make any changes, click
Edit and make the necessary updates in production network if applicable.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 89

 In the lab environment we don’t need to make any edits.
After you have reviewed your selections, click on Start Discovery and
Telemetry.

Step 13 Click on View Discovery.

Step 14 Cross verify the Discovery name RrPp-Device and Status show as Completed.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 90

Congratulations! The device discovery is complete.

Task 2: Assigning Devices to a Site

The first step of the provisioning process begins by selecting devices and associating (assigning) them
to a site, building, or floor that you previously created with the Design application.
Before you can provision devices, they must be discovered and added to inventory, which is why you
completed the Discovery tool and Design exercises first. There is a distinct order of operation in Cisco
DNA Center workflows.

Cisco DNA Center provides this level of granularity in Orchestration and Automation. In the lab, all
devices that are provisioned to the site will receive further provisioning to operate in a fabric role.

Activity Procedure
Complete the following steps:
Step 1 Log into the Cisco DNAC and click on Cisco DNA Center icon ( ) from the top-
left corner and choose Provision > NETWORK DEVICES > Inventory.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 91

 Step 2 Make sure the Inventory page is set as Global.

Step 3 Select your pod devices by checking the check box next to the devices.

The boxes change to , and the devices become highlighted.

Step 4 Hover your mouse cursor on the Actions drop-down menu. Click on Provision >
Assign Devices to Site.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 92

 Step 5 Click on Choose a site.

Step 6 Choose RrPp-BLDG1 from the Hierarchy and click on Save.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 93

 Step 7 Click on Next.

Step 8 Click on Next.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 94

 Step 9 Click on Next.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 95

 Step 10 Click on Preview

Step 11 Click on device names to view the site assigned.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 96

Task 3: Assigning Shared Services
Now that the pod device have been assigned a site, the next step is to provision them with the Shared
Services (AAA, DHCP, DNS, NTP, etc.) which were set up in the Design App.

Activity Procedure
Complete the following steps:
Step 1 Within the Inventory section click on Global, select RrPp-BLDG1 in the hierarchy
and verify your assigned devices.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 97

 Step 2 Hover your mouse cursor on the Focus ( ) drop-down and click on Provision.

Step 3 Select your device RrPp-9300 switch. Hover your mouse cursor on the Actions
drop-down list and click on Provision > Provision Devices.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 98

 Step 4 Cisco DNA Center opens to the Provision Devices. Verify the device is
assigned to Global/RrPp/RrPp-BLDG1.
Click on Next.

Step 5 Click on Next.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 99

 Step 6 Click on Deploy.

Step 7 Click on Apply.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 100

 Step 8 Click on Device Name to check the Provision Status

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 101

Discovery Lab 5: Discover
Wired Device using Plug and
Play (PnP) using Template Hub
Exercise Description and Objective
The main purpose of PnP automation is to push a Golden image and configuration automatically to a
newly added device. The network administrator must provide the configuration for the new PnP-
provisioned device. Cisco DNA Center uses device templates for this purpose. The Cisco DNA Center
Tools section provides access to the Template Hub.
Before you can start the PnP process, your assigned RrPp-SW-Distribution device must be added
automatically to the Cisco DNA Center Inventory and should be discovered by the Cisco DNA Center
system information. This lab will prepare the seed switch in Cisco DNA Center for the network
discovery and PnP automation process.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 102

Task 1: Configure the Catalyst 9300 Series
Distribution Switch as Seed Device for Cisco DNA
Center PnP Provisioning
Activity Procedure
Complete the following steps:
Step 1 From https://my.labtyme.com home page, right-click on RrPp-9300 switch and
open a new tab window.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 103

 Step 2 Add the following interface configuration to your RrPp-SW-Distribution switch (the
example below shows Rack 2 Pod 20 Distribution switch).
 First make sure that the RrPp-SW-Distribution switch interface Gig 1/0/11 is
shut down
 Network PnP supports devices by using VLAN 1 by default. However, if you
want to use a different VLAN, you can provide a CLI command on the
upstream device. The command is pnp startup-vlan x. While you are
connected through SSH to the Catalyst 9300 switch in your RrPp-SW-
Distribution switch, add the pnp startup-vlan 1046 configuration command to
define the PnP VLAN.
 Configure and enable the Layer 2 switchport mode trunk on your RrPp-SW-
Distribution switch interface Gig1/0/12 in the VLAN 1046 and define the
native VLAN 1046 on the trunking port.
 At the end, save your RrPp-SW-Distribution switch running configuration to
the startup configuration by using the copy run startup command.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 104

Task 2: Discover Wired Device using Plug and
Play(PnP) using Template Hub
Exercise Description and Objective
Enterprises incur major operating costs to install and deploy networking devices as part of campus and
branch deployments. Typically, every device must be prestaged, a process that involves repetitively
copying Cisco IOS Software images and applying configurations manually through a console
connection. Once prestaged, these devices then ship to the final site for installation. The end site
installation may require a skilled installer for troubleshooting, bootstrapping, or any making changes in
the configuration. The entire process can be costly, time consuming, and prone to errors. At the same
time, customers would like to increase the speed and reduce complexity of the deployment without
compromising security.
Cisco Network Plug and Play (PnP) solution provides enterprise customers with a simple, highly
secure, and integrated offering to ease new branch or campus device rollouts or incremental updates to
an existing network. The solution provides a unified approach to provision enterprise networks
comprised of Cisco routers, switches, and wireless access points with a near zero-touch deployment
experience.
It reduces the burden on enterprises by greatly simplifying the process of deploying new devices. An
installer at the site can deploy a new device without using any CLI knowledge, while a network
administrator centrally manages device configuration.
The Cisco Network Plug and Play solution offers the following:
 One solution for configuration of Cisco enterprise switches, routers, and wireless APs.
 A simple, intuitive, and integrated user interface, agnostic of device platforms.
 Automated and centrally managed remote device deployment from Cisco DNA Center.
 Devices that can automatically discover Cisco DNA Center through DHCP, DNS, or through a
PnP mobile application. The built-in, pre-provisioned, and unplanned device workflows in the
Cisco PnP solution simplify the deployment of Cisco IOS Software images and device
configurations.
 Mobile iOS or Android applications help an installer bootstrap device and monitor installation
from remote sites.
 Highly secure, bidirectional device authentication uses Secure Unique Device Identification
(SUDI) and highly secure communication. You use certificates that are stored in a Cisco-
managed trust pool bundle, which includes certificates that are signed by trusted authorities and
published by Cisco Information Security.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 105

Activity Procedure
Complete the following steps:
Step 1 Open the Cisco DNA Center GUI and log in with the following credentials:
 Username: admin
 Password: ISEisC00L
Step 2 Click on Cisco DNA Center icon ( ) from the top-left corner. Then, click on
Tools > Template Hub.

Step 3 In Base Config template. Click on the three dots of Actions menu and select
Clone.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 106

 Step 4 Assign the following values to the newly opened window.
Make the following choices:
 Template Name: RrPp-SW-Access-Template-Day0 (r is your Rack number
and p is your Pod number)
 Project Name: Onboarding Configuration
Click on Clone.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 107

 Step 5 Once you scroll down, you should see your RrPp-SW-Access-Template-Day0
listed. Click on it.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 108

 Step 6 Type CTRL+A to select content and press Delete

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 109

 Step 7 Go to your Admin-PC desktop and open notepad file
RrPp-SW-Access-Template-Day0

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 110

 Step 8 Once you open the file, select the full configuration of the file by pressing Ctrl+A.
Right-click the file and select Copy.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 111

 Step 9 Go to Cisco DNAC and right-click in the Template Hub blank space to Paste the
copied configuration.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 112

 Step 10 Click on Save

Step 11 Verify the Success message.

Step 12 Click on Properties

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 113

 Step 13 In Device Details section. Click on Edit.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 114

 Step 14 Click on Edit Device Details

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 115

 Step 15 In search bar type 3850 and press enter. Select the Cisco Catalyst 3850 Series
Ethernet Stackable Switch

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 116

 Step 16 Click on Add

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 117

 Step 17 Scroll down for Addition details section and type RrPp in Device Tags. Click on
Create new tag.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 118

 Step 18 Click on Continue

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 119

 Step 19 Click on Commit

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 120

 Step 20 Navigate to Design > Network Profiles.

Step 21 Hover the mouse over Add Profile on the right and choose Switching.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 121

 Step 22 On the top left side, type RrPp-Profile for your profile name and under the
OnBoarding Template(s) tab, click plus icon .

Step 23 On the Add Template window, select the template RrPp-SW-Access-Template-

Day0 and click on Add

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 122

 Step 24 Click on Save.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 123

 Step 25 Click on Assign Site

Step 26 Select RrPp-BLDG1 and uncheck both floors. Click on Save

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 124

 Step 27 You are now ready to onboard and PnP your RrPp-SW-Access device. From the
main menu in the Cisco DNA Center GUI, navigate to Provision >NETWORK
DEVICES >Plug and Play.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 125

Note: Make sure in Focus drop down option: All is selected.

Step 28 For this exercise, you will simulate the onboarding process of RrPp-SW-Access
switch to your branch network. In real life deployments, you would get the new
switch, remove the switch from the box, and then cable and power up the switch
to allow the PnP process to begin. In the lab environment, the switch is already
racked, cabled, and powered up. You will simulate the process by erasing the
switch configuration completely and returning the device to factory defaults.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 126

 Step 29 From https://my.labtyme.com home page, right-click on RrPp-3850 switch and
open a new tab window.

Step 30 Return the device to factory defaults by removing the configuration and
certificates with the following configuration commands:
#conf t
In the Switch CLI config mode:
conf t
crypto key zeroize
Yes # Answer yes
no pnp profile pnp-zero-touch
end

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 127

 # In the Switch CLI exec mode:
delete nvram:*.cer
delete flash:vlan.dat
delete flash:pnp-reset-config.cfg
write erase
reload
System configuration has been modified. Save? [yes/no]: no

#Answer no to save changes

Once the confirmation has been issued, it is very important that you do not
press any key in the console until the PnP process has completed. The system
dialog wizard will timeout so that the PnP process can begin. Do not answer any
initial switch setup dialog questions or you will stop the PnP process.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 128

 Step 31 After you enter the reload command on your Rack R Pod P edge switch, you
should wait another 15 minutes; do not click into the console window or
answer dialog questions or enter anything into the PnP agent edge switch
console window. Inspect the console output only, and after 15 minutes you
should see the following console message:

Note Sometimes after reloading of switch it gets stuck to “switch:” mode, If so, please run the command
below:

Step 32 In the Cisco DNA Center GUI, navigate to Provision > Network Devices > Plug
and Play to open the PnP Database table.

Step 33 After few minutes, you will see Switch in the Device Name column that matches
your RrPp-SW-Access switch serial number. Its current status shows
Unclaimed and Onboarding Progress as Initializing. Also note that your pod
switch IP would be 10.146.rp.x ( r is your rack number, p is your pod number and
x could be any value )

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 129

 Step 34 You will observe the device status shows Unclaimed and Onboarding Progress
as Device is ready to be claimed.

Step 35 Select your RrPp-SW-Access switch and from Action drop-down click on
Claim.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 130

Note: Take help from Instructor for credentials in case of EULA Agreement pop-up

Step 36 Click on Assign

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 131

 Step 37 Select RrPp-BLDG1 and click Assign.

Step 38 Click Next.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 132

 Step 39 Verify the name of template and click Next.

Step 40 Click Next.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 133

 Step 41 Click Next.

Step 42 Click Claim.

Step 43 On Information pop-up, click Yes.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 134

 Step 44 You will observe that Status shows as Planned and Onboarding Progress as
Devices Claimed

Step 45 After few minutes the Status shows as Onboarding and Onboarding Progress as
Executing Workflows

Step 46 Your device is now Provisioned.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 135

Task 3: Verify the Inventory
Activity Procedure
Complete the following steps:

Step 1 Go to Cisco DNA Center in the browser and click on the Cisco DNA Center
hamburger icon from the top-left corner.
Step 2 Navigate to Provision > NETWORK DEVICES>Inventory.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 136

 Step 3 Verify the device has been successfully provisioned and visible in the inventory.

Step 4 You have finished the RrPp-SW-Access switch PnP provision process, you
need to enable your RrPp-SW-Distribution switch interface GigabitEthernet
1/0/11.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 137

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 138
Discovery Lab 6:
Discover and Provision C9800
WLC, Configure Wireless SSIDs
and Network Profiles
Overview
The first step of the provisioning process begins by selecting device and associating (assigning) it to a
site, building, or floor that you previously created with the Design application.
Before you can provision devices, they must be discovered and added to inventory, which is why you
completed the Discovery tool and Design exercises first. There is a distinct order of operation in Cisco
DNA Center workflows. In this lab, all devices in inventory will be assigned to a site. Cisco DNA Center
provides this level of granularity in Orchestration and Automation.
In this lab, you will achieve the following objectives:
 Discovery and provision of C9800 WLC.
 Configuration of Wireless SSIDs and Network Profile.
 Provision of APs.
 C9800 WLC verification.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 139

Task 1: C9800 WLC Discovery
Activity Procedure
Complete the following steps:
Step 1 Return to Cisco DNA Center in the browser and click on the Cisco DNA Center
icon ( ) in the upper-left corner.
Step 2 Navigate to Tools > Discovery.

Step 3 Click Add Discovery.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 140

 Step 4 Click on Next

Step 5 Enter the fields in the table to discover the WLC.

Field Value

RrPp-WLC-9800
Discovery Name
(r is Your Rack number and p is your Pod number)

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 141

 Field Value

10.149.rp.1
IP Address/Range
(r is Your Rack number and p is your Pod number)

Subnet Filters Leave blank

Preferred Management IP Address None

CLI dnaadmin

SNMPv2c Read Public

SNMPv2c Write private

NETCONF Enable(Port 830)

Step 6 Click on Next

Step 7 In the Provide Credentials page, select CLI and the click on the check box for
EXISTING GLOBAL CLI CREDENTIALS.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 142

 Step 8 Select SNMPv2c Read and click on the check box EXISTING GLOBAL
SNMPV2C READ CREDENTIALS.

Step 9 Select SNMPv2c Write and click on the check box EXISTING GLOBAL
SNMPV2C READ CREDENTIALS.

Select NETCONF and click on Add NEtCONF Port to add the name
NETCONF_PORT and Port 830.
Click on Next

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 143

 Step 10 In Advanced Settings page, make sure the SSH option is enabled and click on
Next.

Step 11 Select the radio button for Skip site assignment for now and click on Next.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 144

 Step 12 Make sure the radio button option for Now is selected and click on Next.

Step 13 In the Summary page, review your selections and to make any changes, click
Edit and make the necessary updates in production network if applicable.
In the lab environment we don’t need to make any edits.
After you have reviewed your selections, click on Start Discovery and
Telemetry.

Step 14 Click on View Discovery.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 145

 Step 15 Cross verify the Discovery name RrPp-WLC-9800 and Status show as
Completed.

Step 16 In Inventory under Global Hierarchy, you can see the RrPp-WLC-9800 and its
associated APs which are automatically discovered with WLC.
Note1: Devices may take few minutes to show up in Inventory after Add Discovery process.
Note2: In case you don’t see AP’s in Inventory then you may have to select your WLC RrPp-WLC-
9800 and Re-Sync going in Actions drop-down menu,

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 146

Task 2: Assigning WLC Device to a Site
Activity Procedure
Complete the following steps:
Step 1 Return to Cisco DNA Center in the browser and click on the Cisco DNA Center
icon ( ) in the upper-left corner.
Step 2 Navigate to Provision >NETWORK DEVICES> Inventory.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 147

 Step 3 Select the device RrPp-WLC-9800 by checking the blank check box next to the
device. The box changes to , and the device becomes highlighted.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 148

 Step 4 Hover the mouse over the Actions menu and select Provision > Assign Device
to Site.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 149

 Step 5 Click on Choose a site button.

Step 6 Select Global/RrPp/ RrPp-BLDG1, (where r is your Rack Number and p is Pod
Number) and click on Save.

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 150

 Step 7 Click on Next

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 151

 Step 8 Click on Next

Discovery Lab 5 | © 2025 NterOne Corp. IADNACA Lab Guide 152

 Step 9 Click on Next

Step 10 Click on Assign

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 153

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 154
 Step 11 Click on device names to view the site assigned.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 155

Task 3: Design Enterprise Wireless SSIDs for
Employee and Contractor
Overview
You can use Cisco DNA Center to automate the creation of SSIDs, SSID security, AP profiles and
parameters, and wireless QoS settings. Defining these elements in Cisco DNA Center, rather than
defining each of these (per SSID) in the GUI of the WLC, saves time and reduces potential manual
configuration errors.
The wireless workflow in the Design application is a two-step process:
 Create the SSID and its parameters.
 Create the wireless profile.
Creating the SSID involves defining the name along with the type of wireless network (voice, data, or
both), wireless band, security type, and advanced options.
The wireless profile defines whether the wireless network is fabric or nonfabric and defines to which
sites and locations within the hierarchy the profile is assigned. Wireless configurations, like IP address
pools, are configured at the global level of the hierarchy.

Activity Procedure
Complete the following steps:
Step 1 Return to Cisco DNA Center in the browser and click on the Cisco DNA Center
icon ( ) in the upper-left corner and navigate to Design > Network Settings.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 156

 Step 2 In DNA Center, select Wireless and Global in the Hierarchy (left pane).
Click SSIDs in the middle pane.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 157

 Step 3 Hover the mouse on Add and click on Enterprise.

Step 4 Add the SSID Name as RrPp-Employee, where r is your rack number and p is
Pod number. In this example it is R2P20-Employee. Leave all other options as

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 158

 default, also verify SSID STATE: Admin and Broadcast is enabled. click on
Next.

Step 5 Under Security section select Enterprise if not already displayed. Select WPA2
and make sure WPA3 is unchecked for the lab purpose.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 159

 Step 6 Click on Configure AAA, from the drop down select the AAA server ( the one
which you have already integrated). Click on Configure

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 160

 Step 7 Click on Next

Step 8 Click on Next.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 161

 Step 9 Click on Add Profile.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 162

 Step 10 To Associate Profile.
Fill the details as shown below:
Profile Name: RrPp-Floor1 (where r is your Rack Number and p is your Pod
Number)
Fabric: No
Interface Name: select drop-down and click on VLAN1508 if available or click

on the + sign.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 163

 Step 11 Add Interface Name as VLAN1508 and VLAN ID as 1508 and Click on Save

Step 12 Click on Associate Profile.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 164

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 165
 Step 13 Click on Profile RrPp-Floor1.

Step 14 Click on Next

Step 15 On warnings pop-up, click on Yes.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 166

 Step 16 Click on Save

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 167

 Step 17 Back to the Wireless section, select the Global level in the left pane and
Wireless. Next, click SSIDs to add an Enterprise SSID.
.

Step 18 Hover the mouse on Add and click on Enterprise.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 168

 Step 19 Add the SSID Name as RrPp-Contractor, where r is your rack number and p is
Pod number. In this example it is R2P20-Contractor. Leave all other options as
default, also verify SSID STATE: Admin and Broadcast is enabled. click on
Next.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 169

 Step 20 Under Security section select Enterprise if not already displayed. Select WPA2
and make sure WPA3 is unchecked for the lab purpose.

Step 21 Click on Configure AAA, from the drop down select the AAA server ( the one
which you have already integrated). Click on Configure

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 170

 Step 22 Click on Next

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 171

 Step 23 Click on Next.

Step 24 Click on Next

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 172

 Step 25 Click on Add Profile.

Step 26 To Associate Profile.

Fill the details as shown below:
Profile Name: RrPp-Floor2 (where r is your Rack Number and p is your Pod
Number)

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 173

 Fabric: No
Interface Name: select drop-down and click on VLAN1508

Step 27 Click on Associate Profile.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 174

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 175
 Step 28 Click on Profile RrPp-Floor2.

Step 29 Click on Next

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 176

 Step 30 On warnings pop-up, click on Yes.

Step 31 Click on Save

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 177

 Step 32 Verify your Enterprise Wireless SSIDs were created.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 178

 Step 33 Return to the DNA Center, click on Design>Network Profiles

Step 34 Click on Assign Site in front of RrPp-Floor1.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 179

 Step 35 Expand site hierarchy and select RrPp-Floor1 and click on Save.

Step 36 Verify that one site is assigned.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 180

 Step 37 Click on Assign Site in front of RrPp-Floor2.

Step 38 Expand site hierarchy and select RrPp-Floor2 and click on Save.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 181

 Step 39 Verify that one site is assigned.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 182

Task 4: C9800 WLC Provision
Activity Procedure
Complete the following steps:
Step 1 Return to Cisco DNA Center in the browser and click on the Cisco DNA Center
icon ( ) in the upper-left corner and navigate to Provision >NETWORK
DEVICES> Inventory.

Step 2 Select the devices RrPp-WLC-9800 by checking the blank check box next to the
devices.

The boxes change to , and the devices become highlighted.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 183

 Step 3 Hover the mouse over the Actions menu. Select Provision > Provision Device.

Step 4 Click on Next.

Step 5 Click on Select Primary Managed AP Locations.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 184

 Step 6 Select both the check box RrPp-Floor1 and RrPp-Floor2 of your Managed AP
location and click on Save.

Step 7 Click on Next.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 185

 Step 8 Click on Next.

Step 9 Click on Next.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 186

 Step 10 Click on Next.

Step 11 Click on Deploy.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 187

 Step 12 Click on Apply.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 188

Task 5: Assigning APs to a Site
Activity Procedure
Complete the following steps:
Step 1 From the Cisco DNA Center home page click the menu icon in the upper-left
corner and navigate to Provision >NETWORK DEVICES > Inventory.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 189

 Step 2 Select the devices RrPp-AP-Floor1 by checking the blank check box next to the
devices.

The boxes change to , and the devices become highlighted.

Step 3 Hover the mouse over the Actions menu. Select Provision > Assign Device to
Site.

Step 4 Click on Choose a floor.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 190

 Step 5 Select RrPp-Floor1 and click on Save.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 191

 Step 6 Click on Next

Step 7 Click on Assign

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 192

 Step 8 Select the devices RrPp-AP-Floor2 by checking the blank check box next to the
devices.

The boxes change to , and the devices become highlighted.

Step 9 Hover the mouse over the Actions menu. Select Provision > Assign Device to
Site.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 193

 Step 10 Click on Choose a floor.

Step 11 Select RrPp-Floor2 and click on Save.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 194

 Step 12 Click on Next

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 195

 Step 13 Click on Assign

Step 14 Select the devices AP in Global Hierarchy RrPp-AP-Floor1 and RrPp-AP-

Floor2 by checking the blank check box next to the devices.

The boxes change to , and the devices become highlighted.

Step 15 Hover the mouse over the Actions menu. Select Provision > Provision Device.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 196

 Step 16 Click on Next.

Step 17 Click Next on the Configuration page.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 197

 Step 18 Click on Deploy

Step 19 Click on Apply

Step 20 On warning pop-up click on Yes

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 198

 Step 21 On the Warning AP Reboot pop-up window, click on Yes. You may or may not
see this message

Step 22 Click on the devices RrPp-WLC-9800 to verify Provisioning Status

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 199

 Step 23 Click on the devices RrPp-AP-Floor1 to verify Provisioning Status

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 200

 Step 24 Click on the devices RrPp-AP-Floor2 to verify Provisioning Status

Task 6: C9800 WLC Verification

Activity Procedure
Complete the following steps:
Step 1 Log in to RrPp-WLC-9800 using the credentials below:
 Username: admin
 Password: ISEisC00L (Replace the O’s in COOL with zero’s)

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 201

 Step 2 In the dashboard of RrPp-WLC-9800 click on active Wireless LANs number.

Step 3 Verify that the SSIDs which you are created are showing on RrPp-WLC-9800.

Step 4 Write down the Profile name of each SSIDs to verify that APs are broadcasting
appropriate SSIDs as per its assigned floor.
Step 5 Click on Dashboard, click on active Access Points number.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 202

 Step 6 Verify that the Floor1 and Floor2 APs are registered on RrPp-WLC-9800. Click
on RrPp-AP-Floor1.

Step 7 Click on RrPp-AP-Floor1.

Step 8 Click on the AP CAC tab.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 203

 Step 9 Verify that the profile tagged with RrPp-Employee SSID is being broadcast by
Floor1 AP. Click on X in the upper-right.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 204

 Step 10 Click on RrPp-AP-Floor2, in the resulting window click on AP CAC.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 205

 Step 11 Verify that the profile tagged with RrPp-Contractor SSID is being broadcast by
Floor2 AP. Click on X.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 206

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 207
Discovery Lab 7:
Configure C9800 WLC
Using Template Hub
Objective
In this lab, you will achieve the following objectives:
 C9800 WLC configuration using templates.
 Verification of CLI output via Cisco DNAC.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 208

Task 1: Verify any existing login banner using
Command Runner
Complete the following steps:
Step 1 Log in to Cisco DNA Center from the browser and click on the Cisco DNA
Center icon ( ) in the upper-left corner.
Step 2 Navigate to Tools > Command Runner.

Step 3 On the Command Runner page click on Search by Device IP field and select
your assigned RrPp-WLC-9800.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 209

 Step 4 Click on Select/Enter commands and enter the command show banner login,
then click on plus + sign in the far right.

Step 5 Click on Run Command(s).

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 210

 Step 6 Click on show banner login to see its output.

Step 7 You can verify that command has been executed and banner output is blank.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 211

Task 2: Configure C9800 WLC Using Template Hub
Activity Procedure
Complete the following steps:

Step 8 From the Cisco DNA Center GUI, navigate to Tools > Template Hub.

Step 9 In Base Config template. Click on the three dots of Actions menu and select
Clone.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 212

 Step 10 Assign the following values to the newly opened window.
Make the following choices:
 Template Name: RrPp-WLCTemplate (r is your Rack number and p is your
Pod number)
 Project Name: Cloud DayN Templates
Click on Clone.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 213

 Step 11 Once you scroll down, you should see your RrPp-WLC-Template listed. Click on
it.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 214

 Step 12 Type CTRL+A to select content and press Delete

Step 13 Go to your Admin-PC desktop and open notepad file

RrPp-WLC-9800-Template

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 215

 Step 14 Once you open the file, select the full configuration of the file by pressing Ctrl+A.
Right-click the file and select Copy. Please remember template configuration
would be different for every pod.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 216

 Step 15 Go to Cisco DNAC and right-click in the Template Hub blank space to Paste the
copied configuration.

Step 16 Click on Save

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 217

 Step 17 Verify the Success message.

Step 18 Click on Properties

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 218

 Step 19 In Device Details section. Click on Edit.

Step 20 Click on Edit Device Details

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 219

 Step 21 In search bar type Wireless Controller and press enter. Select the Cisco
Catalyst 9800 Wireless Controller for Cloud

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 220

 Step 22 Click on Add

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 221

 Step 23 Scroll down for Addition details section and type RrPp-WLC in Device Tags.
Click on Create new tag.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 222

 Step 24 Click on Continue

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 223

 Step 25 Click on Commit

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 224

 Step 26 Navigate to Design > Network Profiles.

Step 27 Hover the mouse over Add Profile on the right and choose Wireless.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 225

 Step 28 Type RrPp-WLC-Profile for your profile name and select the Templates tab.
Click on Plus Icon .

Step 29 On the Add Template window, select the template RrPp-SW-Access-Template-

Day0 and click on Add

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 226

 Step 30 Click on Save.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 227

 Step 31 Click on Assign Site

Step 32 Select RrPp-BLDG1 and uncheck both floors and Click on Save

Step 33 You can see a site is added to RrPp-WLC-Profile

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 228

 Step 34 From the Cisco DNA Center GUI, navigate to Provision >NETWORK DEVICES
> Inventory.

Step 35 Select the devices RrPp-WLC-9800 by checking the blank check box next to the
devices.

The boxes change to , and the devices become highlighted.

Step 36 Click on the Tag menu and in search select your tag RrPp-WLC. Click on Apply.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 229

 Step 37 A yellow colored tag must get displayed

Step 38 Hover the mouse over the Action menu. Select Provision > Provision Device.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 230

 Step 39 Click OK on warning pop-up.

Step 40 Click on Next.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 231

 Step 41 Click on Managing 2 Primary Location(s)

Step 42 Make sure RrPp-Floor1 and RrPp-Floor2 check boxes are selected. Click on
Save

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 232

 Step 43 Click on the Next.

Step 44 Click on Next.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 233

 Step 45 Click on Next.

Step 46 Click on Deploy

Step 47 Click on Apply

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 234

 Step 48 Click on Device Name to check the Provision Status

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 235

Task 3: Verification of CLI output via Cisco DNAC
Activity Procedure
Complete the following steps:

Step 1 From the Cisco DNA Center GUI, navigate to Tools > Command Runner.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 236

 Step 2 On the Command Runner page, click on Search by Device IP field and select
your assigned RrPp-WLC-9800 device.

Step 3 Click on Select/Enter commands and enter the command show banner login,
and then click on the plus + sign.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 237

 Step 4 Click on Run Command(s).

Step 5 Click on show banner login to see its output.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 238

 Step 6 You can verify that command has been executed, and banner and interface
output is as per template we configured and applied.

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 239

Discovery Lab 7 | © 2025 NterOne Corp. IADNACA Lab Guide 240
Discovery Lab 8:
Configure Cisco DNA Center
Assurance Telemetry Profiles
and Apply to Devices
Overview
In this lab, you will achieve the following objectives:
 Configuration of Telemetry Profiles.
 Assign it to the sites.
 Implementation of Telemetry Profiles on Devices.

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 241

Task 1: Configure Cisco DNA Center Assurance
Telemetry Profiles and Apply to Devices
Activity Procedure
Complete the following steps:
Step 1 Log in to Cisco DNA Center from the browser and click on the Cisco DNA
Center icon ( ) in the upper-left corner.
Step 2 Navigate to Design > Network Settings.

Step 3 Click on the Telemetry tab, then click on the Global tab in the Hierarchy.

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 242

 Step 4 Verify the following telemetry settings for the Global network hierarchy location,
as follows:
 SNMP Traps: Verify the box for Use Cisco DNA Center as SNMP trap server is
checked, if not then check it.
 Syslog: Verify the box for Use Cisco DNA Center as syslog server is checked, if not
then check it.
 NetFlow: Verify the box for Use Cisco DNA Center as NetFlow collector server is
checked, if not then check it.
 Wired Client Data Collection: Verify the box for Monitor wired clients is checked, if not
then check it.
 Wireless Controller, Access Point and Wireless Clients Health: Verify the box for
Enable Wireless Telemetry is checked, if not then check it.
Click Save.

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 243

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 244
 Step 5 On the warning message click OK.

Step 6 Navigate to Global > RrPp network hierarchy location.

Step 7 Validate there is an icon next to each setting indicating those settings are
inherited from a parent object. Click on Save.

Step 8 Click OK on the warning message.

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 245

 Step 9 Navigate to Global >RrPp >RrPp-BLDG1 network hierarchy location.

Step 10 Validate there is an icon next to each setting indicating those settings are
inherited from a parent object. Click on Save.

Step 11 Click OK on the warning message.

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 246

 Step 12 From the Cisco DNA Center GUI, navigate to Provision >NETWORK
DEVICES> Inventory.

Step 13 Check the blank  check box next to the devices listed below to select each
device:
 RrPp-SW-Access

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 247

  RrPp-SW-Distribution
The boxes will change to , and the devices become highlighted.
Step 14 Hover the mouse over the Actions menu. Select Provision > Provision Device.

Step 15 Click on Next.

Step 16 Click on Next

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 248

 Step 17 Click on Deploy.

Step 18 Click on Apply

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 249

 Step 19 Select the device RrPp-WLC-9800 by checking the blank blank check box next
to the devices.

The boxes change to , and the devices become highlighted.

Step 20 Hover the mouse over the Actions menu. Select Provision > Provision Device.

Step 21 Click on Next.

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 250

 Step 22 Make sure you check the Skip AP Provision. Click on Next

Step 23 Click on Next

Step 24 Click on Next.

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 251

 Step 25 Click on Deploy.

Step 26 Click on Apply

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 252

 Step 27 From the Cisco DNA Center GUI navigate to Activities.

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 253

 Step 28 Click on Task and verify all the devices provision status indicate Success.

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 254

 Step 29 From the Cisco DNA Center GUI navigate to Provision >NETWORK DEVICES>
Inventory.

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 255

 Step 30 Select the below devices by checking the blank blank check box next to the
devices.
 RrPp-WLC-9800
 RrPp-SW-Distribution
 RrPp-SW-Access
The boxes change to , and the devices become highlighted.
Step 31 Hover the mouse over the Actions menu, select Telemetry > Update Telemetry
Settings.

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 256

 Step 32 Check the box for Force Configuration Push and click Next.

Step 33 Click on Apply.

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 257

 Step 34 Select the device RrPp-WLC-9800 by checking the blank blank check box next
to the devices.

The boxes change to , and the devices become highlighted.

Step 35 Hover the mouse over the Actions menu, select Telemetry > Enable
Application Telemetry.

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 258

 Step 36 Click on Enable

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 259

 Step 37 Verify the success message for enabling Telemetry Application.

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 260

 Step 38 From the Cisco DNA Center GUI navigate to Activities and click on Tasks.

Step 39 Verify the Update Telemetry Settings Task status indicate Success for all the
devices. Click Refresh if needed.

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 261

Discovery Lab 8 | © 2025 NterOne Corp. IADNACA Lab Guide 262
Discovery Lab 9: Generate and
Monitor Application Traffic on
DNAC for Clients
Overview
In this lab, you will achieve the following objectives:
 Generation of Application traffic using Wireless Client and Wired Client.
 Monitor Application Traffic on Cisco DNA Center – Assurance.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 263

Task 1: Connect to Console of Lab Devices and
Activity Checks on Wired Client
Activity Procedure
Complete the following steps:
Step 1 From your laptop / PC browser, navigate to https://my.labtyme.com

Step 2 Scroll down the web page to the ALL-CONNECTIONS section, click on SDAINT
> SDAINT_Rackr > SDAINT-Rr_Podp (where r is your Rack Number and p is
your Pod Number).
Right-click on the Admin-PCp link and select Open in New Tab. This will open a
new tab containing the connection to the AdminPC.
Repeat the same for the RrPp-PC1-Wired-Client and RrPp-Wireless-Laptop
devices. These console connections will be very useful in this lab activity.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 264

 Step 3 Log in to the Cisco ISE GUI and navigate to https://<<ISE IP Address>>
(ISE IP Address and credentials will be provided by your instructor).

Step 4 Navigate to console of RrPp-PC1-Wired-Client desktop page.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 265

 Step 5 On the desktop of RrPp-PC1-Wired-Client you will find a 3CDaemon-Shortcut
icon, double-click on this icon to open 3CDaemon.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 266

 Step 6 Click on the FTP Server on 3CDaemon.

Step 7 Verify that the FTP server is showing “FTP Server is started” in the left pane.
In the right pane, verify that FTP server is Listening for FTP requests on IP
address: 10.148.rp.1 (where r is Rack number and p as Pod number)

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 267

 Step 8 Don’t close the 3CDaemon.
Step 9 Verify that on the desktop of RrPp-PC1-Wired-Client you find the RrPp-FTP
folder. Open this folder and verify this folder is empty. If you find anything in this
folder, delete it so it shows the folder is empty.

Step 10 Do not close RrPp-FTP folder on the desktop.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 268

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 269
Task 2: Activation of Client on Wireless-PC and
Generation of Application Traffic
Activity Procedure
Complete the following steps:
Step 1 Navigate to the console of RrPp-Wireless-Laptop desktop page.
Step 2 Click on the icon on the extreme right of the task bar.

Step 3 Click on the WiFi icon.

Step 4 In the list of populated SSIDs, click on RrPp-Employee SSID.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 270

 Step 5 Uncheck the box Connect automatically and click on Connect.

Step 6 Enter the following credentials to connect:

 Username: RrPpUser (where r is your assigned Rack Number and p is your
Pod Number)
 Password: Cisco@123 (Replace the O’s in COOL with zero’s)
Click OK.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 271

 Note The user details has already been created on Cisco ISE and can be verified under Administration
> Identity Management-Identities.

Step 7 Once the client is connected, verify the client details on WLC.
Step 8 Navigate to Admin-PC and open the RrPp-WLC-9800 GUI in the browser using
the following credentials:
 IP of RrPp-WLC-9800: 10.149.rp.1 (where r is your assigned Rack Number
and p is your Pod Number)
 Username: admin
 Password: ISEisC00L (Replace the O’s in COOL with zero’s)

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 272

 Step 9 Click on the Dashboard and under Client, verify the Active client is present.
Click on the Active client number.

Step 10 Verify the details of Wireless client connected.

Step 11 Navigate to console of RrPp-Wireless-Laptop.

Step 12 On the desktop you will find the C9800-CL-XXXX-SPA.bin file, right-click on this
file and click on Properties.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 273

 Step 13 Copy the location of C9800-CL-XXXX-SPA.bin file. Then open a New Text
Document Notepad file and paste it into this text document.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 274

 Step 14 Copy the name of the C9800-CL-XXXX-SPA.bin file and paste it in the newly
opened text document followed by an \ next to the file location in the text
document.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 275

 Step 15 Open the Command Prompt.

Step 16 On the Command Prompt execute the following commands:

 cd..
 cd..
 ftp
 open
 10.148.rp.1 (where r is the rack number and p is your Pod Number)
 User Name: FTP-User
 Password: ISEisC00L
 Verify the message 230 User logged in
 mput plus the file location name you copied into the text document and
paste in Command Prompt.
The Command will look like: mput C:\Users\Admin\Desktop\C9800-CL-
XXXXXXXXXX.SPA.bin)
Then press Enter twice.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 276

 Step 17 Port Successful output will be prompted on CMD.

Step 18 Navigate to the console of RrPp-PC1-Wired-Client desktop page and verify in

3CDaemon and RrPp-FTP folder, file is being transferred from Wireless Client
PC to RrPp-FTP folder.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 277

 Step 19 Navigate to console of RrPp-Wireless-Laptop.
Step 20 Open a new Command Prompt window and execute the continuous ping
command for RrPp-SW-Distribution device IP.
Ping 10.146.rp.1.

Step 21 Open a new PuTTY session and SSH to RrPp-SW-Distribution device

(10.146.rp.1) with the user credentials:
 Username: dnaadmin

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 278

  Password: ISEisC00L

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 279

 Step 22 Now three types of Application Traffic are being generated from the Wireless
client:
 Ping
 SSH
 FTP

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 280

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 281
Task 3: Monitor Application Traffic on Cisco DNA
Center – Assurance
Activity Procedure
Complete the following steps:
Step 1 Log in to Cisco DNA Center from the browser and click on the Cisco DNA
Center icon ( ) in the upper-left corner and navigate to Assurance > Health.

Step 2 On the Assurance Dashboard you can view all the connected devices, wired
client, and wireless client. On the dashboard click on Client.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 282

 Step 3 On the Assurance > Health > Client page scroll down and go to the Client
Device section.
In the TYPE tab select Wireless and verify the details of the wireless client
connected, then click on User.

Step 4 Click on RrPpUser and verify the details of wireless Client.

Note Your output may be different than shown in the screenshot.

Step 5 Scroll down and expand the Issues and verify if there any issue reported for the
Wireless Client, you can also monitor Resolved and Ignored issues.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 283

 Note During the lab development there were no issues, but at the time of your Lab activity you might see
some issues.

Step 6 Scroll down and expand the Onboarding tab. Here you can view the Topology of
connected Wireless Client, also if you hover the mouse over the connected
client, you can see the details of client.

Step 7 Scroll down and expand the Event Viewer tab and view the onboarding request
completed by wireless client.

Note Output may be different than shown in the screenshot, especially if there are some issues at the
time of connecting the wireless client.

Step 8 Scroll down and expand the Path Trace and click on Run New Path Trace.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 284

 Step 9 On the resulting window, click on Source IP. In the drop-down list select your
RrPp-WLC-9800 IP 10.149.rp.1 (where r is your assigned Rack Number and p is
your Pod Number).

Step 10 Click on the Interface (optional) and select your RrPp-WLC-9800 IP

10.149.rp.1 (where r is your assigned Rack Number and p is your Pod Number).

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 285

 Step 11 Click on Destination IP and in the drop-down list, select your access switch IP
10.146.rp.2.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 286

 Step 12 Complete the following details:
 Port (Optional): 21
 Protocol: tcp (select from drop-down list)
 Include Stats: Check All (Device, Interface, QoS)
Click on Start.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 287

 Step 13 Path Trace has been generated and displays connectivity flow.

Step 14 Hover the mouse over any link or device and it will display the details of it.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 288

 Step 15 Scroll down and expand the Application Experience. Under the Business
Relevant tab verify Application Traffic for Ping and SSH. (Sometimes, in the
second SS you may see some traffic details have been changed.)
Now, click on the Default tab.

Step 16 In the Application Experience > Default tab, verify the ftp-data traffic. Please
note that with current version of DNAC you may or may not see this. If you don’t
see this then please proceed further.

Important! After completing this lab, please disconnect

the Wireless Client from the Wireless Laptop.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 289

Discovery Lab 10: Application
Visibility and Control on DNAC
Overview
The Application Visibility service lets you manage your built-in and custom applications and application
sets. The Application Visibility service, hosted as an application stack within Cisco DNA Center, lets
you enable the Controller-Based Application Recognition (CBAR) function on a specific device to
classify thousands of networks and home-grown applications and network traffic. This allows us to deal
with applications beyond the capabilities of NBAR 2 which is some 1400+ applications currently.
The following packages must be installed on your DNAC environment:
 Application Policy: Lets you automate QOS policies across LAN, WAN, and wireless within
your campus and branch.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 290

  Application Registry: Lets you view, manage, and create applications and application sets.
 Application Visibility Service: Provides application classification using Network-Based
Application Recognition (NBAR) and CBAR techniques.
The Day-N Application Visibility page provides a quick view of application registry, device recognition
method, device CBAR readiness, application observed in the network for the past 2, 24, or 48 hours,
and CBAR health.
In this lab, you will achieve the following objectives:
 Enable Controller Based Application Recognition.
 Build and Deploy an Application Policy.
 Test Custom Application Policy.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 291

Task 1: Verify Application Visibility Packages on
DNAC
Activity Procedure
Complete the following steps:

Step 1 Log in to Cisco DNA Center from the browser and click on the Help Icon in
the upper-right corner. Then, click About.

Step 2 Click on Packages.

Verify the below packages are available.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 292

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 293
Task 2: Enable Controller Based Application
Recognition on 9800 WLC (CBAR)
Activity Procedure
Complete the following steps:
Step 1 Log in to Cisco DNA Center from the browser and click on the Cisco DNA
Center icon ( ) in the upper-left corner. Navigate to Provision > Services >
Application Visibility.

Step 2 Scroll down and go to the Site Devices section. You will see RrPp-WLC-9800
CBAR Readiness status as Ready, because earlier in Lab 8 you enabled
Application Telemetry.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 294

 Step 3 Select RrPp-WLC-9800 and click on Enable CBAR.

Step 4 You will get a warning message, click Yes.

Step 5 Click on Next

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 295

 Step 6 Click on Enable

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 296

 Step 7 Click Yes on Warning Pop-up

Step 8 Verify your pod WLC(RrPp-WLC-9800) CBAR Readiness Status is Enabled.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 297

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 298
Task 3: Create Custom Application Policy
(Instructor Demo)
Activity Procedure
Complete the following steps:
Step 1 Log in to Cisco DNA Center from the browser and click on the Cisco DNA
Center icon ( ) in the upper-left corner. Navigate to Provision > Services >
Application Visibility.

Step 2 Select Application Sets and click on Add Application Set.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 299

 Step 3 Under Add Application Set enter following values:
 Application Set Name: Custom-Appset
 Default Business Relevance: Business relevant
Click on Save.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 300

 Step 4 Select the Applications tab and click on Add Application.

Step 5 On the Add Application page, enter following values:

 Application Name: Custom-App
 Type –Server Name: nterone.com
 Traffic Class: Bulk Data (select from the drop-down list)
 Application Set: Search for Application Set you created – Custom-AppSet
After you have followed all three screenshots below, click on Save.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 301

 Step 6 Review the Application Sets tab, you will now see the newly created Custom-
AppSet in Yellow.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 302

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 303
Task 4: Deploy Custom Application Policy
Activity Procedure
Complete the following steps:
Step 1 Log in to Cisco DNA Center from the browser and click on the Cisco DNA
Center icon ( ) in the upper-left corner. Navigate to Policy > Application QOS.

Step 2 Under the Application Policies tab, click on the Add button on the right side of
the screen.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 304

 Step 3 To create new App Policy, enter following values:
Application Policy QOS Name: RrPp-Custom-AppPolicy

Step 4 Select Wireless. You will get a warning, click Yes.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 305

 Step 5 Select SSID RrPp-Contractor (where r is your Rack Number and p is your Pod
Number) from the drop-down list, example R2P20-Contractor.

Step 6 Click on 0 Sites in front of Site Scope.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 306

 Step 7 In the new Site Scope window, click on Edit Scope.

Step 8 Select RrPp-Floor2 where SSID RrPp-Contractor (where r is your Rack

Number and p is your Pod Number) is broadcasting. Click on Save.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 307

 Step 9 Under the Application Policies tab, go to Unassigned Application Sets and
expand Custom-AppSet. You will see one custom Application named Custom-
App which contains Server Name nterone.com.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 308

 Step 10 Select Custom-AppSet under Unassigned Application Sets, drag and drop it
under Business Relevant, then click on Deploy.

Step 11 Click on Apply.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 309

 Step 12 Navigate to the Application Policies page and verify the new custom
Application is pushed to your pod WLC (RrPp-WLC-9800).

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 310

Task 5: Test Custom Application Policy
Activity Procedure
Complete the following steps:
Step 1 Navigate to console of RrPp-Wireless-PC desktop page.
Step 2 Click on the show hidden icon on extreme right of the task bar.

Step 3 Click on the Wireless icon.

Step 4 In the list of populated SSIDs, click on RrPp-Contractor SSID.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 311

 Step 5 Uncheck the box Connect automatically and click on Connect.

Step 6 Enter the following credentials to connect:

 Username: RrPpContractor (where r is your Rack Number and p is your Pod
Number)
 Password: Cisco@123
Click on OK.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 312

 Note The user details are already created on Cisco ISE and can be verified under Administration >
Identity Management > Identities.

Step 7 Once client is connected, open Firefox from User Desktop and generate traffic for
custom application www.nterone.com.
 DNA needs a certain amount of traffic and it will take some time
(approximately 5 to 10 minutes) to reflect application traffic on Application
Visibility Dashboard so you will open www.nterone.com in Firefox in two
tabs and play video multiple times (approximately 10 to 12 times).

 You will also run PowerShell Script to generate traffic for www.nterone.com.
Go to desktop and open Custom-AppScript text files. Copy PowerShell
Script and paste on PowerShell window.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 313

 Step 8 From Wireless PC, open PowerShell. In the window search at the lower-left,
enter power, then right-click on Windows PowerShell and Run as
administrator.

Step 9 Run the below script (copied in Step 7) to generate continuous traffic for
nterone.com.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 314

 Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Internet Explorer\
Main" -Name "DisableFirstRunCustomize" -Value 2
clear; $i=1; do {curl https://nterone.com; $i += 1; } while($i -le 50);

Step 10 Go back to your pod Admin PC and log in to your pod WLC. Go to Monitor >
SERVICES > Application Visibility.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 315

 Step 11 Click on client and verify client details and then click on View Application
Details.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 316

 Step 12 Verify Custom Application (Custom-App which has nterone.com inside it) is
visible on WLC now. Once Custom Application details are verified on WLC it will
be visible on DNAC after 5-10 minutes.

Note Make sure you run video for nterone.com continuously.

Step 13 Go back to your pod Admin PC and on DNAC to verify application traffic for
www.nterone.com.
Make sure your hierarchy is set to RrPp-BLDG1. Go to Provision > Services >
Application Visibility > Overview. Click on Last 2 Hours as shown below in the
diagram.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 317

 Step 14 Go back to your pod wireless client and generate traffic for Non-Custom
Application like www.youtube.com. Go to Firefox browser and open
www.youtube.com and play a few videos for approximately 10 to 15 minutes.

Step 15 Go to DNAC Provision > Application Visibility > Overview. Select Last 2
Hours.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 318

 Step 16 Go to WLC Monitor > SERVICES > Application Visibility and check for
Youtube traffic.
.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 319

Discovery Lab 11:
DNAC Integration with Umbrella
Overview
In this lab, you will achieve the following objectives:
 Verify Cisco Umbrella network and create/edit DNS policy.
 Integration of DNAC with Cisco Umbrella and provision WLC.
 Test Cisco Umbrella Policy with content filtering on.
 Block Youtube.com application traffic for Contractors.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 320

Task 1: Verify Cisco Umbrella Dashboard for Your
Corporate Subnet
Activity Procedure
Complete the following steps:
Step 1 You will now verify the IP address into the Cisco Umbrella dashboard. This will
allow Cisco Umbrella to identify the source of the DNS request as coming from
your organization. Browse to dashboard.umbrella.com. You may use your own
browser or the Admin PC’s browser within your Pod.
Your instructor will provide you with login credentials.

Step 2 Expand Deployments > Core Identities > Networks.

Verify IP 67.76.96.200/31, which was previously added by the lab team, is in a
state of either Active (if it already has some traffic) or Inactive but not verifying.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 321

 In your lab environment when wireless clients connect they get Vlan1508 IP
address via DHCP server hosted on the core switch. When wireless clients tries
to go out to the Internet they would go through PAT using 67.76.96.200/31 range.
This network will already be added on the Umbrella dashboard by the lab team
before the training starts.

Note The status of the Network will remain inactive until we start forwarding traffic to Umbrella.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 322

Task 2: Upload Umbrella Certificates on DNAC
(Instructor Demo)
Activity Procedure
Complete the following steps:
Step 3 Log in to dashboard.umbrella.com from Admin PC using Google Chrome
browser.

Step 4 Click on the Lock symbol in browser URL space. Click on Connection is secure
to check certificate details.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 323

 Step 5 Click on Certificate is valid.

Step 6 Click on Details and select DigiCert TLS RSA SHA256 2020 CA1

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 324

 Step 7 Click on Export

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 325

 Step 8 From the left-hand side options select path as your pod Admin PC desktop, enter
the name of certificate file as UmbrellaIntermediateCertificate. Click on Save.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 326

 Step 9 Click on Details and select DigiCert Global Root CA. Click on Export.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 327

 Step 10 Select path as your pod Admin PC Desktop, enter name of certificate file as
UmbrellaRootCertificate. Click on Save.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 328

 Step 11 Verify two Certs are exported on you pod Admin PC.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 329

 Step 12 On Admin PC, return to Cisco DNA Center from the browser and click on the
Cisco DNA Center icon ( ) in the upper-left corner and navigate to System >
Settings.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 330

 Step 13 On System Settings page, scroll down and under Trust & Privacy click on
Trustpool and then Import.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 331

 Step 14 On Import Certificate page, click on Choose a file.

Step 15 It will redirect to your pod Admin PC desktop. Select All Files and then
UmbrellaIntermediateCertificate. Click on Open.

Step 16 Click on Import.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 332

 Step 17 You will see Certificate Successfully Imported message. Click on Import.

Step 18 Repeat same steps to Import Root Certificate. Click on Choose a file.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 333

 Step 19 It will redirect to your pod Admin PC desktop. Select All Files and then
UmbrellaRootCertificate. Click on Open.

Step 20 Click on Import.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 334

 Step 21 You will see Certificate Successfully Imported message.

TRUSTPOOL MSG PENDING

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 335

Task 3: Create DNS Policies on Cisco Umbrella
(Instructor Demo)
Activity Procedure
Complete the following steps:
Step 1 Return to dashboard.umbrella.com
Step 2 Click on Policies > Management > DNS Policies.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 336

 Step 3 Expand Default Policy and edit Content Setting Applied: Default Settings.

Step 4 Under Limit Content Access, in the lower-left select Custom and make sure
Default Settings is selected under Custom Setting to the right side of the
screen.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 337

 Step 5 Expand Content Categories and scroll down. Select Streaming Video, to filter
www.youtube.com, and click on Set & Return.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 338

 Step 6 Click on Save

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 339

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 340
Task 4: DNAC Integration with Cisco Umbrella
(Instructor Demo)
Activity Procedure
Complete the following steps:
Step 1 DNAC integration with Cisco Umbrella requires API keys and Secrets to be
generated on Cisco Umbrella dashboard and copied and pasted on DNAC.
From Admin PC return to dashboard.umbrella.com web page and write down
the Organization ID (this information will be required in Step #8) from URL.
We will have slightly different terms used for Keys and Secrets for DNAC and
Umbrella. Please refer to the table below for details.

DNA Umbrella

Network Device API Key Cisco Umbrella Network Devices Key

Network Device Secret Cisco Umbrella Network Devices Secret

Management API Key Cisco Umbrella Management Key

Management API Secret Cisco Umbrella Management Secret

Legacy Device Registration Token Legacy Network Devices

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 341

 Step 2 Go to Admin > API Keys and click on Legacy Keys

Step 3 Expand Cisco Umbrella Network Devices.

Click on Generate Token.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 342

 Step 4 You will see the Key and Secret generated. These two will be copied and pasted
on DNAC as Network Device API Key and Network Device Secret.

Step 5 Expand Cisco Umbrella Management. Click on Generate Token.

Step 6 You will see Key and Secret generated for Cisco Umbrella Management.
These two will be copied and pasted on DNAC as Management API Key and
Management API Secret.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 343

 Step 7 Expand Legacy Network Devices. Click on REFRESH and copy the Token.

Step 8 On Admin PC return to Cisco DNA Center from the browser and click on the
Cisco DNA Center icon ( ) in the upper-left corner. Navigate to System >
Settings

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 344

 Step 9 Use Organization ID (copied in step 1) to copy on DNAC. Copy different Keys
and Secret from Cisco Umbrella and paste on DNAC as per the table below.

DNA Cisco Umbrella

Network Device API Key Cisco Umbrella Network Devices Key

Network Device Secret Cisco Umbrella Network Devices Secret

Management API Key Cisco Umbrella Management Key

Management API Secret Cisco Umbrella Management Secret

Legacy Device Registration Token Legacy Network Devices

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 345

 Step 10 Go to External Services > Umbrella. After you have entered the values in all
fields, click on Save.

Note If you see any error after clicking on save, please regenerate API keys by deleting the current
information and pasting new keys and secrets on DNAC.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 346

 Step 11 DNAC integration with Cisco Umbrella is completed. For verification go to
System > System 360.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 347

 Step 12 On System 360 page, hover mouse over Actions in upper-right and click Edit
Dashboard.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 348

 Step 13 Click on Add Dashlet.

Step 14 On Add Dashlet page, select Umbrella Dashlet and click on Add.

Step 15 Notice Organization ID with Cisco Umbrella Availability and click on Save.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 349

 Step 16 You will see Success massage, click on OK.

Note Beyond this point students will now do the configuration on their respective pod.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 350

Task 5: Update Global DNS on WLC
Activity Procedure
Complete the following steps:
Step 17 Navigate to Admin-PC and open the RrPp-WLC-9800 GUI in the browser by the
following credentials:
 IP of RrPp-WLC-9800: 10.149.rp.1 (where r is your Rack Number and p is
your Pod Number)
 Username: admin
 Password: ISEisC00L (Replace the O’s in COOL with zero’s)

Step 18 Click on the Administration > DNS.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 351

 Step 19 Click on Local DNS IP to edit and add global DNS.

Step 20 Add Global DNS IP as 8.8.8.8 and click on the plus + sign.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 352

 Step 21 Click on Update & Apply to Device.

Step 22 Verify global DNS is added. Click on the Save icon in the upper-right as shown in
the diagram below.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 353

 Step 23 On the Save Configuration message, click on OK.

Step 24 Return the Cisco DNA Center icon ( ) in the upper-left corner and navigate to
Provision > NETWORK SERVICES >Inventory.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 354

 Step 25 On the Inventory page select your pod WLC and hover your mouse over Action
> Inventory > Resync Device.

Step 26 Click OK on the Warning Message.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 355

 Step 27 Your pod WLC is now synced and has reach Managed state.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 356

Task 6: Provision WLC with Cisco Umbrella
Policies
Activity Procedure
Complete the following steps:
Step 28 On admin PC return to Cisco DNA Center from the browser and click on the
Cisco DNA Center icon ( ) in the upper-left corner and navigate to Provision >
SERVICES > Umbrella.

Step 29 Click on your Rr-Pp (where r is your Rack Number and p is your Pod Number)
and go to the Umbrella Enablement section. Click on Eligible Devices.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 357

 Step 30 Click on Wireless Controllers and click Next.

Step 31 Select your POD WLC RrPp-WLC-9800 (where r is your Rack Number and p is
your Pod Number).
Observe Umbrella Status is DISABLED. Click on Next.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 358

 Step 32 On Define Umbrella Policy Mapping(Wireless) page, select SSID RrPp-
Contractor (where r is your Rack Number and p is your Pod Number) and keep
Cisco Umbrella Policies as Default Policy. Click on Next.

Step 33 Click on Next.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 359

 Step 34 For lab purposes, select No to DNS packet Encryption and click Next.

Note In a production network, it is recommended to use Yes, I’d like to encrypt DNS Traffic with DNS
Packet Encryption.

Step 35 Click on Deploy.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 360

 Step 36 Click on Apply.

Step 37 Deployment of Cisco Umbrella policies is in progress for one device, click on
View Status to check progress.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 361

 Step 38 You will see that RrPp_ RrPp-BLDG1_Umbrella-Enable is in progress.

Step 39 After a few minutes you will see policy configuration is completed successfully.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 362

 Step 40 Click X in the upper-right to close the Cisco Umbrella Enable window, and notice
the status as Success under the Tasks tab.

Step 41 From Admin PC desktop, Type putty in search and click on Open.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 363

 Step 42 Open SSH to your Pod WLC RrPp-WLC-9800 (where r is your Rack Number
and p is your Pod Number) using IP address 10.149.rp.1.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 364

 Step 43 Log in using the credentials below:
 Username: dnaadmin
 Password: ISEisC00L (Replace the O’s in COOL with zero’s)
Step 44 Run the below command to validate Cisco Umbrella configuration via CLI.
show umbrella config

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 365

Task 7: Test Cisco Umbrella Policy
Activity Procedure
Complete the following steps:
Step 1 Navigate to console of RrPp-Wireless-Laptop desktop page.
Step 2 Click on the show hidden icon on the extreme right of the task bar.

Step 3 Click on the Wireless icon.

Step 4 In the list of populated SSIDs click on RrPp-Contractor SSID.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 366

 Step 5 Uncheck the box Connect automatically and click on Connect.

Step 6 If prompted enter the following credentials to connect:

 Username: RrPpContractor (where r is your Rack Number and p is your Pod
Number)
 Password: Cisco@123
Click OK.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 367

 Note The user details are already created on Cisco ISE and can be verified under Administration >
Identity Management > Identities.

Step 7 Open Mozilla Firefox from the desktop shortcut and browse to the following
websites:
 www.cisco.com
 www.nterone.com
All the websites should load successfully.

Step 8 Now try to open www.youtube.com which is blocked by Cisco Umbrella default
policy. You will see the default block page.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 368

 Step 9 Return to Cisco DNA Center from the browser and click on the Cisco DNA
Center icon ( ) in the upper-left corner and navigate to Provision >
SERVICES>Umbrella

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 369

 Step 10 On Umbrella Service Statistics tab, verify Total Umbrella DNS Queries and
Blocked Umbrella DNS Queries.

Note It will take some time to reflect application traffic on DNAC dashboard.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 370

 Step 11 Return to Cisco Umbrella GUI and go to Reporting > Activity Search.

Step 12 Verify www.youtube.com is blocked by Umbrella Policies. Click on Blocked

filter from the left-hand side options.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 371

 Step 13 Click on to view details. Click on View Full Details.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 372

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 373
Discovery Lab 12: Assurance
Dashboards – Health, Issues
and Wi-Fi 6 on DNAC
Overview
In this lab, you will achieve the following objectives:
 Health and issues of devices connected.
 Monitor health and issues on Cisco DNA Center – Assurance.
 Issue – Disconnect AP from RrPp-SW-Access switch.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 374

Task 1: Connect to Console of Lab Device and
Create Issue from Access Switch
Activity Procedure
Complete the following steps:
Step 1 Navigate to https://my.labtyme.com/ and enter the username and password
(the login credentials provided by your instructor for your assigned Rack r and
Pod p numbers) and click Login.

User Login Password

SDAINT-Rr-Podp Password provided by Instructor

Step 2 Scroll down the web page to the ALL CONNECTIONS section.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 375

 Right-click on the ADMIN-PCp link and select Open in New Tab (where r is your
assigned Rack number and p is your assigned Pod number).
Repeat the step above for the RrPp-3850 device. These console connections will
be very useful in this lab activity.

Step 3 Navigate to console of RrPp-SW-Access.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 376

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 377
 Step 4 Verify the interface Gig 1/0/23 port of AP RrPp-AP-Floor1 connected on RrPp-
SW-Access switch by using the following command:
show cdp neighbors

Step 5 Verify the status of interface Gig 1/0/23 on RrPp-SW-Access switch by using the
following command:
show interface gig 1/0/23 status
Status should be connected.

Step 6 Disconnect the AP from RrPp-SW-Access switch by using the following

command:
Configure terminal
Interface gig 1/0/23
shut
exit
exit
show interface gig 1/0/23 status
Verify status is disabled.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 378

 Step 7 Do not close the RrPp-SW-Access console.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 379

Task 2: Monitoring Issues on Cisco DNA Center –
Assurance
Activity Procedure
Complete the following steps:
Step 8 Log in to Cisco DNA Center from the browser and click on the Cisco DNA
Center icon ( ) in the upper-left corner.
Step 9 Navigate to Assurance > DASHBOARDS> Issues and Events.

Step 10 Select your site hierarchy Global/RrPp/RrPp-BLDG1 as indicated in the

diagram. Then under the Open tab you will find two open issues.

Priority Issue Type Device Role

P2 AP disconnected from WLC on Switch Access Point

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 380

 Note On Assurance > Dashboard > Issues under Open tab there could be more than these two issues
related to another activity in your Assigned Rack and Pod.

Do not close the Cisco DNA Assurance > DASHBOARDS > Issues and Events
page.
Step 11 Navigate to the RrPp-SW-Access console. Alternatively, you can also open a
PuTTY session on Admin-PC for RrPp-SW-Access.

Step 12 Re-connect the AP from RrPp-SW-Access switch by using the following

command and verify the status is connected.
configure terminal
interface gig 1/0/23
no shut
exit
exit
show interface gig 1/0/23 status

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 381

 Step 13 Navigate to Cisco DNA Assurance > DASHBOARDS > Issues and Events.
Step 14 Wait for few minutes.
Step 15 Hover your mouse on Issues and click on the Resolved. Verify that now the AP
down issue is on the list of resolved issues.

Step 16 Verify that now the AP down issue is on the list of resolved issues.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 382

Task 3: Modify Issue Settings in Cisco DNA Center
Assurance
Activity Procedure
Complete the following steps:
Step 17 Navigate to Cisco DNA Center in the browser and click on the Cisco DNA
Center icon ( ) in the upper-left.
Step 18 Navigate to Assurance > SETTINGS > Issue Settings.

Step 19 On the Assurance > SETTINGS > Issue Settings page you can see various
types of issues with a Priority category.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 383

 Step 20 If you are under any scheduled activity and you want to reduce priority for such
issues which occur, you can reduce the priority. You can also increase the
priority if needed. In this lab task we will be reducing the priority.
Step 21 From the list of issues, click on WLC unreachable. To locate it quickly, you can
type wlc unreachable in the search box.

Step 22 In the resulting window click on the current Priority, and in the drop-down menu
select the priority P2.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 384

 Step 23 Click on Apply.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 385

 Step 24 Verify that the reduced priority has been set for the Issue.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 386

Task 4: Configure Syslog Server and Integrate with
DNAC (Instructor Demo)
Activity Procedure
Complete the following steps:
Return to the https://my.labtyme.com, scroll down the web page to the ALL
CONNECTIONS section.
Step 25 Right-click on the RrPp-PC1-Wired-Client link, and select Open in New Tab.
(Where “r” is your Rack Number and p is your Pod Number.)

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 387

 Step 26 Verify the DNAC-Syslog folder is created on desktop. Open the 3CDeamon-
Shortcut on the RrPp-PC1-Wired-Client desktop.

Step 27 In the 3CDeamon window, select Syslog Server and click on Configure Syslog
Server.

Step 28 A new window will pop-up, select Syslog Configuration and enter the following
values.
 Directory for Syslog: C:\Users\Admin\Desktop\DNAC-Syslog\
 Who Can Login: Anyone
 Log Messages to: Log By Priority. (Info.log, debug.log etc.)
Click on Apply, Save and then OK.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 388

 Step 29 Verify the Syslog Service is started.

Step 30 To add Syslog Server on DNAC, log in to Cisco DNA Center from the browser
and click on the Cisco DNA Center icon ( ) in the upper-left corner.
Step 31 Navigate to System > Settings.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 389

 Step 32 On left panel go to External Services > Destinations, select the Syslog tab.
Click on Add.

Step 33 On the Add Syslog Configuration window, enter the following values. This is an
example for Rack2 and Pod20

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 390

  Name: RrPp-InterfaceFlap (Where r is your assigned Rack Number and p is
your Pod Number.)
 Description: Interface Connecting Network Device Down
 Hostname/IP Address: Wired IP of any student POD (10.148.rp1.) which
will be used for this demo.
 Port: 514
 Protocol: UDP
Click on Save.

Step 34 Verify the Syslog Server destination has been added.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 391

 Step 35 Return to Cisco DNA Center from the browser and click on the Cisco DNA
Center icon ( ) in the upper-left corner.
Step 36 Navigate to Assurance > SETTINGS > Issue Settings.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 392

 Step 37 On Issue Setting page, click on Manage Subscription.

Step 38 Under Event Notifications -> Notifications, click on Create New +

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 393

 Step 39 Click on Let’s Do it

Step 40 Under Select a site select your building

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 394

 Step 41 In the search bar type Interface connecting and press enter

Step 42 Make sure you reduce the font size of the browser to see the Event Name and
then select it and click on Next

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 395

 Step 43 Select Syslog and Click on Next

Step 44 From the drop down select RrPp-InterfaceFlap and then click on Next

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 396

 Step 45 Enter following details and Click on Next
 Name: Syslog Notification-RrPp
 Description: Syslog Notification

Step 46 Click on Finish

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 397

 Step 47 Observe the message below which indicates that your notification is complete.

Step 48 You will create an issue now on RrPp-SW-Distribution.

Step 49 Login to RrPp-SW-Distribution and shutdown the interface g1/0/12. Wait for 10
minutes, this will ensure that DNAC will push the Interface down alert to syslog
server. Also, once the interface comes back up, DNAC will again send a
notification to the syslog server.
Step 50 Notice that from DNAC Assurance > Issues > open you see one open issue
and since it has subscribed, DNAC will send this information to the syslog server.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 398

 Step 51 Login to RrPp-SW-Distribution and no shutdown the interface g1/0/12 and wait
for around 10 minutes.
Step 52 Log in to WiredClient-PC1 and open the DNAC-Syslog folder. Open the Info
text file.

Step 53 Review the Info text file and you will see the issue sent by DNAC.
Notice issue status was first Active and then changed to Resolve.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 399

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 400
Task 5: Wi-Fi 6 Readiness Check
Activity Procedure
Complete the following steps:
Step 1 Navigate to Cisco DNA Center in the browser and click on the ( ) icon in the
upper-left.
Step 2 Navigate to Assurance >DASHBOARDS> Wi-Fi 6.

Step 3 On Wi-Fi 6 dashboard you can verify that 50% network is Wi-Fi 6 enabled.
Click on View Details.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 401

 Step 4 Hover the mouse over Non-Wi-Fi 6 APs color circle, click on that circle and
verify that AP connected on Floor2 is Non-Wi-Fi 6 AP.

Step 5 Hover the mouse over Wi-Fi 6 APs color circle, click on that circle and verify that
AP connected on Floor1 is Wi-Fi 6 AP.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 402

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 403
Discovery Lab 13:
Intelligent Packet Capture

Overview
In this lab, you will achieve the following objectives:
 Intelligent capture using Wireless Client details.
 Intelligent capture using 91XX AP.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 404

Task 1: Intelligent Packet Capture Using Wireless
Client Details
Activity Procedure
Complete the following steps:
Step 1 Navigate to URL: https://my.labtyme.com/ and enter the username and
password (the login credentials provided by your instructor for your assigned
Rack r and Pod p numbers) and click Login.

User Login Password

SDAINT-Rr-Podp Password provided by Instructor

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 405

 Step 2 Scroll down the web page to the ALL CONNECTIONS section, right-click on the
ADMIN-PCp link, and select Open in New Tab. (Where r is your assigned Rack
Number and p is your Pod Number.)
Step 3 Repeat the step above for RrPp-Wireless-Laptop devices. These console
connections will be very useful in this lab activity.

Step 4 Navigate to console of RrPp-Wireless-Laptop desktop page.

Step 5 Click on the show hidden icon on extreme right of the task bar.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 406

 Step 6 Click on the Wireless icon.

Step 7 In the list of populated SSIDs, click on RrPp-Employee SSID.

Step 8 Uncheck the box Connect automatically and click on Connect.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 407

 Step 9 Enter the following credentials to connect:
 Username: RrPpUser (where r is your Rack Number and p is your Pod
Number)
 Password: Cisco@123
Click on OK.

Note The user details are already created on Cisco ISE and can be verified under Administration >
Identity Management > Identities.

Step 10 From the Admin PC log in to Cisco DNA Center from the browser and click on
the Cisco DNA Center icon ( ) in the upper-left corner. Navigate to Assurance
>SETTINGS> Intelligent Capture Settings.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 408

 Step 11 Under the Client Schedule Capture tab, click on +Schedule Client Capture.

Note: To expedite the below process. Ping the gateway of your RrPp-Wireless-Laptop.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 409

 Step 12 In the newly opened window, click on Select client devices.
In the search bar type your wireless username RrPpUser and select your
username from the drop-down list.
Then expand the username and select the user.

Note The MAC address of your Pod’s Wireless PC will be different than shown in the screenshot, please
select the user for your assigned Pod.

Note You may find that do not see any user details after expanding your username RrPpUser. If this
issue occurs, navigate to RrPp-Wireless-PC to connect the user to RrPp-Employee SSID and
wait for up to 15 minutes. After that, if you still don’t see a client entry, then logout from Cisco
DNAC and login again and repeat this Lab from Step #3.

Step 13 Once you see the client entry, then disconnect the wireless client from the Wi-Fi
network.
Step 14 Click outside of the pane and click Save.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 410

 Step 15 Verify that the user is populated, then select the user by clicking on the user
under Identifier.

Step 16 Once you click on the User in the previous step, it will navigate to a new page.
On that page, under Onboarding Events you may see some old events or logs.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 411

 Step 17 Do not close this page.
Step 18 Navigate to console of RrPp-Wireless-PC desktop page.
Step 19 Click on the show hidden icon on the extreme right of the task bar.

Step 20 Click on the Wireless icon.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 412

 Step 21 In the list of populated SSIDs, click on RrPp-Employee SSID.

Note The user details have already been created on Cisco ISE and can be verified under
Administration-Identity Management.

Step 22 Once the client is connected, verify the client details by opening the Command
Prompt and execute the following command:
Ipconfig

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 413

 Step 23 Once client is verified, wait for few minutes.
Step 24 Then, navigate to the Cisco DNAC Assurance page and verify the new Events
for connection of Wireless Client are populated.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 414

 Step 25 Expand the events and verify the sequence of events, click on events, and verify
the details of events.

Step 26 Click on Stop Live Capture.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 415

 Step 27 Return to the RrPp-Wireless-PC.
Step 28 Click on the Wireless icon.

Step 29 Click on Disconnect.

Step 30 Navigate to Admin-PC and open the RrPp-WLC-9800 GUI in the browser using
the following credentials:
 IP of RrPp-WLC-9800: 10.149.rp.1 (Where r is your assigned Rack Number
and p is your Pod Number.)
 Username: admin
 Password: ISEisC00L (Replace the O’s in COOL with zero’s)

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 416

 Step 31 Click on the Dashboard and under Client, verify Active client is present. Then
click on the Active Client Number.

Step 32 Select the Client and click on Delete.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 417

 Step 33 Click Yes on the confirmation message.

Note After completing this Task, please wait for 15-20 minutes to ensure DNAC removes the
wireless client information from its database. After 15-20 minutes, logout of Cisco DNAC
and then log back in and continue to the next Task.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 418

Task 2: Intelligent Packet Capture Using 91xx AP
Activity Procedure
Complete the following steps:
Step 1 Log in to Cisco DNA Center from the browser and click on the Cisco DNA
Center icon ( ) in the upper-left corner.
Step 2 Navigate to Assurance > SETTINGS>Intelligent Capture Settings.

Step 3 Click on the Access Point tab. Select the radio button for Specific-select
specific APs and enable, then click on Get Started.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 419

 Step 4 On the left pane, under Hierarchy, click on RrPp-Floor2. Verify there is one AP
RrPp-AP-Floor2 on this floor under Disabled APs.

Step 5 On the left pane, under Hierarchy, click on Floor1. Verify there is one AP on this
floor under Disabled APs. Click on Disabled APs, select the AP then click on
Enable.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 420

 Note On Floor1 and Floor 2 we have connected C9130AXI-B and AIR-AP1832I-B-K9 model APs. Both
APs support Intelligent Capture, but we will enable it on Floor1 AP.

Step 6 Click Yes on the Warning pop-up message.

Step 7 Wait for the progress bar to complete to 100%.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 421

 Step 8 Click on the Cisco DNA Center icon ( ) in the upper-left corner and navigate to
Assurance > DASHBOARDS>Health.

Step 9 On the Assurance > DASHBOARDS > Health page click on Client.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 422

 Step 10 On the Client page, scroll down and go to the Client Device section. In the
TYPE tab, select the Wireless tab, here you will find there are no wireless clients
listed.

Step 11 Do not close this page.

Step 12 Navigate to console of RrPp-Wireless-PC desktop page.
Step 13 Click on the show hidden icon on the extreme right of the task bar.

Step 14 Click on the Wireless icon.

Step 15 In the list of populated SSIDs, click on RrPp-Employee SSID.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 423

 Note The user details have already been created on Cisco ISE and can be verified under
Administration-Identity Management.

Step 16 Once the client is connected, verify the client details by opening the Command
Prompt and executing the following command:
Ipconfig

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 424

 Step 17 Once client is verified, navigate to Cisco DNAC Assurance page and wait for
around 10-15 minutes to see Wireless Client information on DNAC.

Note You may need to log out and log back into Cisco DNAC.

Step 18 Verify that Wireless client has been connected via RrPp-AP-Floor1. Click on the
user.

Step 19 Verify the client details and click on Intelligent Capture.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 425

 Step 20 Once you click on Intelligent Capture, it will navigate to a new page. On that
page, under Onboarding Events you can see onboarding events.

Step 21 Expand the events and verify the sequence of events. Click on events and verify
the details of the events. You can verify details of any event by clicking on it.

Step 22 In the upper-right corner, click on Run Packet Capture.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 426

 Step 23 Click on Save

Step 24 Wait until you see Enabling live capture.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 427

 Step 25 Live Capturing is enabled. Since the wireless client is already connected and
sending encrypted traffic, AP’s intelligent capture feature won’t show the real
time application traffic here. You can stop Live Capturing to save AP resources.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 428

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 429
Discovery Lab 14:
1800s AP as Sensor
Overview
In this lab, you will achieve the following objective:
 Test Cisco 1800s AP as a Sensor via Cisco DNA Center.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 430

Task 1: Configure Cisco 1800s AP as a Sensor
(Instructor Demo)
Activity Procedure
Complete the following steps:
Step 1 Navigate to URL: https://my.labtyme.com/ and enter the username and
password (the login credentials provided by your instructor for your assigned
Rack r and Pod p numbers) and click Login.

User Login Password

SDAINT-Rr-Podp Password provided by Instructor

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 431

 Step 2 Scroll down the web page to the ALL CONNECTIONS section, right-click on the
RrPp-9300 link. Then select Open in New Tab. (Where r is your assigned Rack
Number and p is your Pod Number.)

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 432

 Step 3 On RrPp-9300 CLI run the following command to check DHCP information:
show run | sec dhcp

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 433

 Step 4 On RrPp-9300 CLI, remove hex value from option 43 under DHCP Pool for vlan
1050 and configure ASCII value to enable PnP (Plug and Play) for sensor AP.
On Admin PC Open Option43-PnP text file and copy ASCII value.
Please note that IP address needs to be DNAC IP in option 43 ascii value. If you
are using a different DNAC then change that IP address to point to your class
DNAC IP.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 434

 Step 5 On RrPp-3850 CLI, unshut port Gig1/0/19 which is connected to 1800s Sensor
AP. Once you enable it, verify it gets IP from DHCP(VLAN1050). Run the
commands below :
Show run interface gigabitEthernet 1/0/19
Conf t
Interface GigabitEthernet 1/0/19
No sh
End
Show cdp neighbors gigabitEthernet 1/0/19 detail

Note It will take approximately 5 to 10 minutes to get IP address via DHCP server which is running on
9300 switch.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 435

 Step 6 On Admin PC, return to Cisco DNA Center in the browser and click on the Cisco
DNA Center icon ( ) in the upper-left corner.
Step 7 Navigate to Provision > NETWORK DEVICES > Plug and Play.

Step 8 Under the Plug and Play tab, change the Focus to All and verify sensor AP is
there and is in an Unclaimed state. Onboarding Progress would be around 10%.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 436

 Step 9 When Onboarding Progress has reached 40% then select the device by ticking
on the to claim it. Hover the mouse over Actions, then click on Claim.

Step 10 At this stage you can rename the sensor AP, but in our lab we will keep the name
as is. To assign the sensor AP to the site click on Assign.

Step 11 Select RrPp-Floor1 and click on Assign.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 437

 Step 12 Verify sensor AP is assigned to RrPp-Floor1 and click on Next.

Step 13 Click on Next.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 438

 Step 14 Click on Next.

Step 15 Click on Claim.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 439

 Step 16 The Information message will pop-up, click on Yes.

Step 17 Once you click on Claim, the sensor AP provisioning will go through different
stages:
 Planned
 Onboarding
 Provision
Step 18 Planned: Click on AP under Device Name.

You will see Provisioning is in progress, click on the X to close the window after
few seconds.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 440

 Step 19 Onboarding: Once you close the window above, after few minutes it will move to
the Onboarding state.

Step 20 After a few moments you will notice that the sensor AP will change from
Unclaimed to a Provisioned state.

Step 21 Go back to Provision>NETWORK DEVICES>Inventory from the upper-left.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 441

 Step 22 On the Inventory page, select your Global>RrPp->RrPp-BLDG1> RrPp-Floor1.
Verify sensor AP is listed in a Managed state.

Step 23 Return to Cisco DNA Center in the browser and click on the Cisco DNA Center
icon ( ) in the upper-left corner.
Step 24 Navigate to Assurance > DASHBOARD > Sensors.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 442

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 443
 Step 25 In the Overall Summary section you will see Total Sensors = 1. There are
different types of tests available which you can perform with the help of the
sensor AP, including:
 Onboarding
 RF Assessment
 Network Services
 Performance
 App. Connectivity
 Email

Note In the diagram above it shows that there is one sensor which is in idle state and is not running any
test at this moment.

Step 26 Return to Cisco DNA Center in the browser and click on the Cisco DNA Center
icon ( ) in the upper-left corner.
Step 27 Navigate to Assurance > SETTINGS > Sensors.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 444

 Step 28 On the Sensor List select the AP and hover mouse over Action. You will see
options available like SSH Edit, Edit Senser Name, and others.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 445

 Note In the production network, we usually click on the Edit SSH option and set up SSH credentials so
that sensor AP can be remotely managed. However, in the lab environment we are not going to
configure this option. The step above was simply to show you the options available under Actions.

Step 29 Click on Test Templates and select Add Sensor Test.

Step 30 Under Set up Sensor Test, choose Test Templates name as Demo Sensor
Test and select SSID as RrPp-Employee (scroll down). You can also Add or
Select third-party SSIDs which are non-Cisco. For this lab purpose we will not
add or select third-party SSIDs.
Click on Next.

Step 31 Enter the following SSID credentials and Click on Next.

 Username: RrPpUser
 Password: Cisco@123

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 446

 Step 32 On the Define Sensor Test Category Details window, choose tests you want to
perform on RrPp-Employee. For this example, select the following tests:
 Onboarding
 RF Assessment
 Network Services Tests: Select DNS and enter nterone.com
 Application Tests: Select Web and enter URL www.nteron.com (we are
deliberately misspelling the URL.)
Click on Next.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 447

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 448
 Step 33 On the Select AP Coverage page you will see 2.4Ghz and 5GHz band.
Select 2.4 GHz for this lab, then click on Next.

Step 34 Click on Create Test.

Step 35 Test Template is created. Click on Deploy Test to Locations.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 449

 Step 36 Expand your pod and select RrPp > RrPp-BLDG1-> RrPp->Floor1.

Step 37 Click on Continuous and then Click on Next.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 450

 Step 38 On the Summary page, click on Deploy Test.

Step 39 Verify Demo Sensor Test is deployed and is ready to run. Click on Run Now.

Step 40 You will see a Success message, click on OK.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 451

 Step 41 Return to Cisco DNA Center in the browser and click on the Cisco DNA Center
icon ( ) in the upper-left corner.
Step 42 Navigate to Assurance > DASHBOARDS > Sensors.

Step 43 On the Overall Summary page verify one running test and its results.

Note You need to wait 5-10 minutes to start getting stats. Value of test result may vary in your lab.

Step 44 Click on Onboarding and verify the test is successful.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 452

 Step 45 Close the Onboarding pop-up window, click on RF Assessment and observe the
test results. Your results at the time of performing the labs for this section may
vary.

Step 46 Close the RF Assessment pop-up window and click on Network Services.
DNS lookup for nterone.com should be successful.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 453

 Step 47 Close the Network Services pop-up window, click on App. Connectivity and
observe reachability to nteron.com (purposely misspelled) which will fail.

Step 48 Navigate to Assurance > SETTINGS > Sensors.

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 454

 Step 49 Click on Test Templates, select Demo Sensor Test, click on Actions and then
select Undeploy

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 455

 Step 50 Click on Yes

Discovery Lab 14 | © 2025 NterOne Corp. IADNACA Lab Guide 456

Discovery Lab 15:
Application Visibility with
Thousand Eyes and DNAC
Overview
ThousandEyes is a network intelligence SaaS platform that allows users to run a variety of tests using
global vantage points to monitor DNS resolution, browser response characteristics, detailed aspects of
network pathing and connectivity, the status of network routing, and VoIP streaming connection quality.
In this lab, you will achieve the following objectives:
 Add ThousandEyes Agent package on DNAC.
 Install Enterprise Agents on Cisco Switches with Docker Run Time.
 Set up Cisco ThousandEyes tests.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 457

Task 1: Upload ThousandEyes Agent Package on
DNAC (Instructor Demo)
Activity Procedure
Complete the following steps:
Step 1 Connect to your Student Desktop. Navigate to URL: https://my.labtyme.com/
and enter the username and password (the login credentials provided by your
instructor for your assigned Rack r and Pod p numbers) and click Login.

User Login Password

SDAINT-Rr-Podp Password provided by Instructor

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 458

 Step 2 The https://my.labtyme.com web page will redirect you to your Rack r Pod p
web page where you can access your Pod devices.
Scroll down the web page to the ALL-CONNECTIONS section. Right-click on the
ADMIN-PCp link, and select Open in New Tab. (Where r is your assigned Rack
Number and p is your Pod Number.)

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 459

 Step 3 Log in to Cisco DNA Center in the browser and click on the Cisco DNA Center
icon ( ) in the upper-left corner.
Step 4 Navigate to Provision > SERVICES > App Hosting for Switches.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 460

 Step 5 On the App Hosting page click on New App.

Step 6 Click on Choose a file or drag and drop to upload Agent File in DNAC. It will
redirect you to the Admin Desktop where you will find a folder named
ThousandEyes. Double-click on this folder and select Agent file.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 461

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 462
 Step 7 Click on Upload Once Agent .tar file appears.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 463

 Step 8 Verify that one App has uploaded on DNAC under the App Hosting for
Switches section.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 464

Task 2: Deploy ThousandEyes Agent Package on
9300 Switch from DNAC
Activity Procedure
Complete the following steps:
Step 1 From https://my.labtyme.com web page scroll down to the ALL CONNECTIONS
section. Right-click on the RrPp-9300 link, and select Open in New Tab. (Where
r is your assigned Rack Number and p is your Pod Number.)

Step 2 Next, open Console to RrPp-9300 distribution switch. Log in to switch using
credentials dnaadmin/ISEisC00L.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 465

 Step 3 From the Admin PC open the ThousandEyes GUI using the link
https://app.thousandeyes.com/login and enter username and password (the
login credentials will be provided by your instructor).

Step 4 On the ThousandEyes (TE) dashboard, expand Cloud & Enterprise Agent and
select Agent Settings. Click on Add New Enterprise Agent.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 466

 Step 5 Under the Cisco Application Hosting tab, copy the Account Group Token and
paste it in a Notepad file on the admin desktop. This Token will be used later in
this lab.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 467

 Step 6 Return to Cisco DNA Center in the browser and click on the Cisco DNA Center
icon ( ) in the upper-left corner. Go to Provision > SERVICES > App Hosting
for Switches.

Step 7 Return to the App Hosting page and click on ThousandEyes Agent App.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 468

 Note On your screen you may see the Installed On Devices count as a number other than 0. This is not
important; we are going to continue regardless of the number shown.

Step 8 Click on Install.

Step 9 On the Get Started page, enter the Task Name as RrPp-TE-Install. (Where r is
your assigned Rack Number and p is your Pod Number.)
Click on Next.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 469

 Step 10 On the Select Site page, select your RrPp-BLDG1 and click on Next.

Step 11 On the Switches page, notice your pod Distribution RrPp-9300 switch is in a Not
Ready state.

Step 12 To see the reason for Not Ready, click on See Details. To push TE Agent
Package, DNAC uses Web Login to enter to devices, but in this case HTTPs
credentials are not set up on DNAC.
Please note that you discovered 9300 switch in one of the initial labs using SSH
credentials and SNMP strings and HTTPs credentials were not used.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 470

 Step 13 Click on the X in the upper-right to close View Details window.

Step 14 To rectify this error, exit the current workflow and configure HTTPs credential on
DNAC. Click on Exit.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 471

 Step 15 Return to Cisco DNA Center in the browser and click on the Cisco DNA Center
icon ( ) in the upper-left corner. Go to Provision > NETWORK DEVICES >
Inventory.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 472

 Step 16 On the Inventory page, select your site hierarchy as RrPp. Select distribution
switch RrPp-9300 by clicking on the check box next to it.

Step 17 Make sure focus Inventory is selected. Hover your mouse over Actions and
select Inventory > Edit Device.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 473

 Step 18 On the Edit Device page under Credentials, scroll down and expand HTTPS
Section. Enter following values:
 Username: dnaadmin
 Password: ISEisC00L (Replace the O’s in COOL with zero’s)
 Port: 443
Click on Update.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 474

 Step 19 Notice your Pod Distribution Switch is syncing with the new configuration,
keep refreshing it.

Step 20 Verify your Pod Distribution Switch reaches the Managed state.

Step 21 Return to Cisco DNA Center in the browser and click on the Cisco DNA Center
icon ( ) in the upper-left corner. Go to Workflows.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 475

 Step 22 On the Workflows page, select your workflow and your hover mouse over the
three dots on the Enable Apps on Switches, then click on Resume.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 476

 Step 23 Verify the Readiness state of your pod distribution switch RrPp-9300, it will now
be Ready or Partially Ready.

Step 24 Select your device and click on Next.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 477

 Step 25 On the configure App page, enter following values:
 Address Type: Dynamic
 VLAN: Select WirelessClient-Internet.
 Do Not Click Next.

Step 26 Scroll down to Docker Run Time Options section and make the following
changes:
 Replace “Token_Not_set” with Token value you copied and pasted earlier
in the Admin PC Notepad in Task 2, Step #5.
 Replace “$(System_Name)” with RrPp-9300-TE (Where r is your assigned
Rack Number and p is your Pod Number.)
 Replace “agent” with agentrp (Where r is your assigned Rack Number and p
is your Pod Number.)

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 478

 Below is an example from Rack2, Pod20 for your reference:

Step 27 Click on Next.

Step 28 On the Summary page click on Provision.

Step 29 Click on View Details to check the progress.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 479

 Step 30 Verify Deploying status.

Step 31 Return to the RrPp-9300 console to view session logs. Verify different stages of
DNAC interaction with switch, as shown below in the diagram.
 DNAC will use HTTPS credentials to web login to the 9300 switch.
 DNAC will install the ThousandEyes APP on the 9300 switch. Switch will then
extract the modules from the compressed file.
 The 9300 switch will perform MD5 checksum for image verification.
 ThousandEyes Agent will start running on the 9300 switch.
 ThousandEyes Agent on 9300 switch will then contact the ThousandEyes
portal using VLAN1508, which has Internet connectivity.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 480

 Step 32 In case the switch session is logged out, then log back into the switch using the
following credentials and verify app hosting details.
 Username dnaadmin
 Password: ISEisC00L (Replace the O’s in COOL with zero’s)
Run the following command on 9300 console to verify State, Version, and Docker
Run Time Information.
show app-hosting detail

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 481

 Step 33 Return to DNAC and verify the status is Provisioned.

Step 34 Click on Next

Step 35 You will receive a message on DNAC that the task is Completed.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 482

 Step 36 Return to the TE portal dashboard (browser tab), under Enterprise Agents you
will see that your pod switch RrPp-9300-TE is registered.

Step 37 Click on RrPp-9300-TE and verify details like Private and Public IP, Image
Version, and Platform.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 483

 Note On the Catalyst 9300 switch, as part of Day-0 configuration, there was already a static IP address
on Vlan1508 before you started this lab. However, DNAC has also provisioned a dynamic IP
address in Vlan1508 which will be used by the 9300 switch to reach out to the ThousandEyes
portal. That IP address you see in the above diagram as Private IP Address, gets PAT into a Public
IP Address in the lab core infrastructure.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 484

Task 3: Perform Test from ThousandEyes
Dashboard
Activity Procedure
Complete the following steps:
Step 38 From the ThousandEyes dashboard you can run multiple tests as part of your
troubleshooting requirements. Tests such as Network, Routing DNS, WEB and
Voice are available. In this lab you will run a Web test.
Return to ThousandEyes GUI and expand Cloud & Enterprise Agents, then
click on Test Settings.

Step 39 On the Add New Test window click on Web, then click HTTP Server.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 485

 Step 40 In the Basic Configuration section, insert the Test Name as nterone.com.
Then in the URL enter nterone.com and click on Select Agent box, keep all
other settings as default.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 486

 Step 41 Click on Enterprise and select your Switch RrPp-9300-TE. Click outside to exit
window.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 487

 Step 42 Verify 1 of 1 selected in the Agent field. Click on Create New Test.

Step 43 Click on arrow to open the test.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 488

 Step 44 Click on Run Once to run the test.

Step 45 It will open a new window with details for test results. Under the Cloud &
Enterprise Agents > Views > WEB > HTTP Server tab you will see different
traffic for nterone.com.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 489

 Step 46 Under Network, click on Path Visualization to view Forwarding Loss and Link
Delay.

Discovery Lab 15 | © 2025 NterOne Corp. IADNACA Lab Guide 490

Discovery Lab 16:
AI Endpoint Analytics on DNAC
Overview
Endpoint analytics aggregates data from a variety of sources in the network, collates and analyzes it to
build a detailed endpoint profile, and groups similar endpoints by applying artificial intelligence (AI) and
machine learning (ML) techniques.
The following packages must be installed on your DNAC environment:
 AI Endpoints Analytics
 Network Analytics (Optional)
 Application Registry
 Application Visibility Service
 Machine Reasoning
In this lab, you will achieve the following objectives:
 Set up Cisco AI Endpoint Analytics in Cisco DNA Center.
 Verify that required software packages are installed on DNAC.
 Connect and enable data sources.
 Publish authorization attributes to Cisco ISE.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 491

Task 1: Verify AI Packages on DNAC Appliance
The following packages must be installed on your DNAC environment:
 AI Endpoints Analytics
 Network Analytics
 Machine Reasoning
 Application Policy
 Application Registry

Activity Procedure
Complete the following steps:

Step 1 Log in to Cisco DNA Center from the browser and click on the Help Icon in
the upper-right corner. Click on About.

Step 2 Click on Packages.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 492

 Verify the packages below are available:

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 493

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 494
Task 2: Enable Cisco AI Analytics on DNAC and
Connect Data Source
Activity Procedure
Complete the following steps:
Step 1 Log in to Cisco DNA Center from the browser and click on the Cisco DNA
Center icon ( ) in the upper-left corner. Navigate to System > Settings.

Step 2 Scroll down and under External Services, click on Cisco AI Analytics.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 495

 Step 3 Scroll down and make sure all AI Analytics features are enabled and if not then
do that. Click on Update if the option is not greyed out.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 496

 Step 4 Return to Cisco DNA Center from the browser and click on the Cisco DNA
Center icon ( ) in the upper-left corner. Navigate to Policy > AI Endpoint
Analytics.

Step 5 On the AI Endpoint Analytics Setup prerequisite and configurations window click
on configure to accept the required configurations. Then click on Confirm.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 497

 Step 6 Click on Let’s Do it

Step 7 Click on Finish

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 498

 Step 8 Click on Done.

Step 9 Scroll down and Click on Manage Configurations

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 499

 Step 10 Click on ISE Integration and verify Endpoint Profile Publishing to ISE is
enabled. If it is not enabled, please enable it.
Click on the check boxes to enable the features below that are not already
enabled.
 Endpoint attributes forwarding from Cisco ISE
 Endpoint profile publishing to ISE
Click on Save if required.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 500

 Step 11 Log in to the Cisco ISE GUI (Use your pod assigned ISE Server IP Address)
using the following credentials:
 Username: admin
 Password: ISEisC00L

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 501

 Step 12 Navigate to Cisco ISE from the browser and click on the Cisco ISE icon ( ) in
the upper-left corner.

Step 13 From the Work Centers tab, under Profiler click Setting.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 502

 Step 14 Under the Profiler Settings, change COA type from No COA to Reauth.
Also enable the following two settings:
 Custom Attribute for Profiling Enforcement.
 Profiler Forwarder Persistence Queue.
Keep the rest of the settings as their default.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 503

 Step 15 On the same page under Endpoint Analytics Settings, check the check boxes to
the following:
 Publish Endpoint Attributes to AI Endpoint Analytics.
 Consume Endpoint Profiles from AI Endpoint Analytics.
Click on Save.

Step 16 Return to the Cisco ISE icon ( ) in the upper-left corner, and click on
Administration > PxGrid Services > Diagnostics.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 504

 Step 17 Under Diagnostics > Web Socket, verify that DNAC is sharing Endpoint
Analytics data with Cisco ISE.

Note The one highlighted under Publications should have endpoint keyword in it as shown below. Hover
the mouse on string under Publications to see the whole string in pop-up.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 505

Task 3: Verify Endpoint Data and Export to ISE for
Policy
Activity Procedure
Complete the following steps:
Step 18 Navigate to console of RrPp-Wireless-PC desktop.
Step 19 Click on the show hidden icon on extreme right of the task bar.

Step 20 Click on the Network icon.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 506

 Step 21 In the list of populated SSIDs click on RrPp-Contractor SSID. Uncheck the box
Connect automatically and click on Connect.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 507

 Step 22 Enter the following credentials to connect:
 Username: RrPpContractor (Where r is your assigned Rack Number and p
is your assigned Pod Number.)
 Password: Cisco@123 (Replace the O’s in COOL with zero’s)
Click OK.

Note The user details have already been created on Cisco ISE and can be verified under
Administration > Identity Management > Identities.

Step 23 Once the client is connected, write down the MAC address of the Wi-Fi LAN
Adapter and run continuous ping to the default gateway.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 508

 Step 24 Log in to Cisco DNA Center from the browser and click on the Cisco DNA
Center icon ( ) in the upper-left corner. Navigate to Policy > AI Endpoints
Analytics.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 509

 Step 25 Go to the Endpoint Inventory tab and scroll down to search for your MAC
address.
Select MAC address by clicking on the check box next to it.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 510

 Step 26 Hover your mouse over More Actions and select Profile with Custom Rule.

Step 27 On the Overview page click on Let’s Do It.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 511

 Step 28 On the Name Rule and Type page, enter the following values:
 Rule Name: RrPp-RandomClient (Where r is your assigned Rack Number
and p is your assigned Pod Number.)
 Profile Label: Select Endpoint Type from the drop-down list.
 On Endpoint Type, enter work in the search bar and select work.
Click on Next.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 512

 Step 29 On the Choose Attribute Condition page, reduce the font size of the browser to
67% before proceeding.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 513

 Step 30 On the Choose Attribute Condition page, scroll down to select the following
radius attributes as conditions:
 NAS Identifier: RrPp-WLC-9800 (Where r is your assigned Rack Number and
p is your assigned Pod Number.)
 Username: RrPpContractor (Where r is your assigned Rack Number and p
is your assigned Pod Number.)

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 514

 Step 31 Both selected radius attributes will appear on top. Click on Next.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 515

 Step 32 To set condition, drag the AND logical operator in the top box.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 516

 Step 33 Drag and drop both Attributes (selected in last step) to the condition boxes.
Click on Next.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 517

 Step 34 If you see any Duplicate policy message click Yes and go to Review Rule
page. If any endpoints are found, ignore them and click on Next.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 518

 Step 35 Review Summary Logic and condition and click on Done.

Step 36 Endpoint Profiling is complete. There is no option to go back from here, so return
to the Policy section.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 519

Task 4: Create and Verify ISE Authorization Policies
Based on Endpoint Analytics
Activity Procedure
Complete the following steps:
Step 37 To log into the Cisco ISE GUI, navigate to
https://10.10.10.Y (Use your pod assigned ISE Server
IP Address) and log in with the following credentials:
 Username: admin
 Password: ISEisC00L

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 520

 Step 38 Go to the Cisco ISE icon ( ) in the upper-left corner and click on Context
Visibility > Endpoints.

Step 39 Scroll down and search for your client Wi-Fi MAC address. Verify IP and MAC
address, they will have a green symbol.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 521

 Step 40 Click on the MAC Address and scroll up. Go to Attributes > Other Attributes.

Step 41 Scroll through the list of attributes and verify Endpoint Analytics (EA) from
DNAC. Based on these Attributes, an Authorization policy can be created to
provide network access to devices.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 522

 Step 42 Verify the current policy for user RrPpContractor is shown as permit.
Return to the Cisco ISE icon ( ) in the upper-left corner and click on Operation
> RADIUS > Live Logs.

Step 43 The Authorization profile is PermitAccess.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 523

 Step 44 Create an Authorization Profile using Endpoint Analytics attributes imported from
DNAC. Go to Policy > Policy Sets.

Step 45 Expand Default under Policy Sets.

Step 46 Expand Authorization Policy.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 524

 Step 47 Scroll down and go to Basic_Authenticated_Access policy, then click on the
gear icon on the far-right. Click on Insert new row above.

Step 48 Assign a new name to policy as RrPp-AI (Where r is your Rack Number and p is
your Pod Number). Click the plus + sign to set a new condition for this policy.

Step 49 On the Conditions Studio Page, in Editor click on the top blank box.
Under All Dictionaries, click on the drop-down list and search for InternalUser.
All Dictionaries to set as first condition, select InternalUser > Name.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 525

 Step 50 Enter name Equals to RrPpContractor (where r is your Rack Number and p is
your Pod Number) and click on the NEW tab to add a second condition.
Do not click on Save.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 526

 Step 51 Click on the empty box to select an attribute.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 527

 Step 52 Under Dictionary, select Endpoint-Analytics. Scroll down through the list of
Endpoint-Analytics options and select trustScore. This feature comes after ISE
integration with DNAC, not available by default in ISE.

Step 53 Select Greater Than Operator and enter the value of 1. Scroll down and click on
Use.
Do not click on Save.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 528

 Note In the above step just for lab purpose we are matching Endpoint-Analytics-trustScore Greater
than 1 and then in the following step we are going to assign DenyAccess authorization profile to it.
In a production environment we would not deny users like this.

Step 54 On the Policy Sets page, select DenyAccess as authorization profiles from the
drop-down menu.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 529

 Step 55 Click on Save.

Before you test the new policy for RrPp-Contractor SSID, first disconnect your
wireless client, clean up the entry from WLC, and then from Cisco ISE.
Step 56 Return to wireless PC and Disconnect from RrPp-Contractor SSID.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 530

 Step 57 Return to your pod WLC and go to the Dashboard. Click on Active Clients and
select the client MAC and delete it.

Note In this section you may see the Sensor-Client-1800S, do not select it.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 531

 Step 58 Return to Cisco ISE icon ( ) in the upper-left corner and click on Context
Visibility > Endpoints. Scroll down and select your client Wi-Fi MAC address
and delete it.

Step 59 Return to your RrPp-Wireless-PC desktop page and try to connect to

RrPp-Contractor SSID. Verify you are not able to connect.

Step 60 Return to Cisco ISE and go to Operations > Radius > Live Logs and verify
different authorization profiles for the client connection as detailed below:

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 532

  Permit Access for Basic Auth (Initially when the client connects it gets
permit access.)
 COA Request (ISE shares contextual information about client with DNAC
and DNAC in return will share Endpoint Analytics attributes with ISE and
Change of Authorization will trigger.)
 Deny Access (Deny Access policy will hit as it was created on top of Permit
Access.)

Note The diagram below shows the most recent event first, i.e., Deny Access, however sequence-wise
Permit Access comes into play first, followed by COA, then Deny Access.

Discovery Lab 16 | © 2025 NterOne Corp. IADNACA Lab Guide 533

Discovery Lab 17:
Reporting on Cisco DNAC
Overview
In this lab, you will achieve the following objectives:
 Client-Client Summary: This client report view provides an executive summary like health and
counts of clients that are seen in the network.
 Executive Summary: Analyze how the network is performing in network devices, clients, and
issues.
 Inventory-All Data: All data view provides detailed information about network devices,
Distribution of devices over time, Device Count by Site, Device Count by Device Type, Device
Count by Software Version, and Device Count by Fabric Role.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 534

Task 1: Reports for Client-Client Summary
Activity Procedure
Complete the following steps:
Step 1 Return to Cisco DNA Center in the browser and click on the Cisco DNA Center
icon ( ) in the upper-left corner.
Step 2 Navigate to Reports.

Step 3 On the working pane of Reports, click on the Report Templates tab.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 535

 Step 4 On the left pane click on Client. Under Client Summary click on Generate.

Step 5 Click on Let’s Do it.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 536

 Step 6 On the Select Report Template page verify the Template name is Client
Summary and click on Next.

Step 7 Click on the Report Name then click on X button to the right.

Step 8 Enter report name RrPp-ClientSummary.

Step 9 In the Location tab drop-down menu click on RrPp and select Group by
BUILDING. Click on Next.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 537

 Step 10 On the Schedule Report page under Time Range, select Last 24 Hours. Under
Schedule, select Run Now and click on Next.

Step 11 Under Delivery and Notification select None option and click on Next.

Step 12 On the Summary page click on Next.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 538

 Step 13 Click on View all Reports.

Step 14 Click on the report name you generated.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 539

 Step 15 Wait for the download to complete, then click on the Download link once it is
available.

Step 16 To view the report, go to recent downloads of your browser and double click the
RrPpClientSummary file to open.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 540

Task 2: Reports for Executive Summary
Activity Procedure
Complete the following steps:
Step 1 Return to Cisco DNA Center in the browser and click on the Cisco DNA Center
icon ( ) in the upper-left corner.
Step 2 Navigate to Reports.

Step 3 On the working pane of Reports, click on the Report Templates tab.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 541

 Step 4 On the left pane click on Executive Summary, then under Executive Summary
click on Generate.

Step 5 Click on Let’s Do it.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 542

 Step 6 On the Select Report Template page verify Template name is Executive
Summary and click on Next.

Step 7 Update the report name to RrPp-ExecutiveSummary.

Step 8 Click on the Location field and select RrPp in the drop-down menu (where r is
your Rack Number and p is your Pod Number).

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 543

 Step 9 Leave all other options in their default settings and click on Next.

Step 10 On the Schedule Report page, under Time Range, select Last 24 Hours.
Under Schedule, select Run Now and click Next.

Step 11 Under Delivery and Notification, select None option and click Next.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 544

 Step 12 On the Summary page click Next.

Step 13 Click on View all Reports.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 545

 Step 14 Click on the report name you generated.

Step 15 Wait for the download to complete, click on the Download link once available.

Step 16 To view the the report, go to recent downloads of your browser and double click
the RrPpExecutiveSummary file to open.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 546

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 547
Task 3: Reports for Inventory
Activity Procedure
Complete the following steps:
Step 1 Return to Cisco DNA Center in the browser and click on the Cisco DNA Center
icon ( ) in the upper-left corner.
Step 2 Navigate to Reports.

Step 3 On the working pane of Reports, click on the Report Templates tab.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 548

 Step 4 On the left pane click on Inventory, under Inventory All Data option click on
Generate.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 549

 Step 5 Click on Let’s Do it.

Step 6 On Select Report Template page verify Template name as All Data
(Inventory) and click on Next.

Step 7 Update the report name as RrPp-Inventory.

Step 8 Click on the Location field and select RrPp from the drop-down menu.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 550

 Step 9 Leave all other options as their default settings and click Next.

Step 10 Select file type as PDF and click on Next.

Step 11 On the Schedule Report page under Schedule, select Run Now and click Next.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 551

 Step 12 Under Delivery and Notification, select none option and click on Next.

Step 13 On the Summary page click Next.

Step 14 Click on View all Reports.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 552

 Step 15 Click on the report name you generated.

Step 16 Wait for the download to complete. Click on the Download link once available.

Step 17 To view the the report, go to recent downloads of your browser and double click
the RrPpInventory file to open.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 553

Discovery Lab 18: IOS-XE
Device Upgrade / Downgrade
Using SWIM via DNAC
Overview
In this lab, you will achieve the following objective:
 IOS upgrade / downgrade of device via Cisco DNA Center.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 554

Task 1: IOS Upgrade / Downgrade of Device via
Cisco DNA Center
Activity Procedure
Complete the following steps:
Step 1 Return to Cisco DNA Center in the browser and click on the Cisco DNA Center
icon ( ) in the upper-left corner.
Step 2 Navigate to Provision > NETWORK DEVICES > Inventory.

Step 3 Under Inventory, click on the device RrPp-WLC-9800 device to view the device
details.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 555

 Step 4 Verify the Image Version of RrPp-WLC-9800 device.

Step 5 Click on the Cisco DNA Center icon ( ) in the upper-left corner. Navigate to
Design > Image Repository.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 556

 Step 6 Under the Global Hierarchy, click on Import Image.

Step 7 On the Import Image/Add-On page click on Choose File.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 557

 Step 8 On the newly opened window in the left pane, under Desktop select the file
C9800-CL-universalk9.17.06.02.SPA.bin. Click on Open.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 558

 Step 9 Click on Import.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 559

 Step 10 Wait for the progress bar to complete 100%.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 560

 Step 11 Click on Show Tasks button to verify the progress.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 561

 Step 12 Verify the desired image imported.

Step 13 Scroll down the window and click on Cisco Catalyst 9800-CL Wireless
Controller for Cloud.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 562

 Step 14 Click on the star symbol to make your imported image a Golden Image.

Step 15 After you will mark the image as Golden, the color of the star will change to gold.

Step 16 You will receive a Success message.

Step 17 Click on the Cisco DNA Center icon ( ) in the upper-left corner.
Step 18 Navigate to Provision >NETWORK DEVICES> Inventory.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 563

 Step 19 Under Inventory, select the RrPp-WLC-9800 device. Hover the mouse over
Actions and navigate to Software Image > Update Image and click on Update
Image.

Step 20 On the Image Update page under Analyze Selection, select the device and
click on Next.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 564

 Step 21 Click on Next.

Step 22 Click on Next.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 565

 Step 23 In Software Distribution section, select NOW, enable Software Activation
After Distribution option and click on Next

Step 24 Click on Submit

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 566

 Step 25 Click Yes on the Information message.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 567

 From the DNA Center menu, navigate to Activities.

Step 26 Click on Tasks. Click on the task to view current status of the update.

Step 27 Verify the progress of upgrade and click on Go to Image Update Status.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 568

 Step 28 Examine the status of upgrade.

Step 29 Verify distribution of image has successfully completed, click on the device
name.

Step 30 Click on the round button shown with device name to check the device and
upgrade status, then click on X.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 569

 Step 31 Wait approximately 15 to 30 minutes.
Step 32 Verify the image has successfully activated.

Step 33 Click on the round button shown with the device name to check the current
version of IOS, then click on X.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 570

 Step 34 Open a PuTTY session and SSH the RrPp-WLC-9800 to view the current
version of IOS.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 571

 Step 35 Log in to RrPp-WLC-9800 in the web browser to verify that AP’s have also
successfully registered. Click on Dashboard.

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 572

 Step 36 Click on Access Points and then click on any AP and observe the AP image is
downgraded to 17.6.2.43

Discovery Lab 18 | © 2025 NterOne Corp. IADNACA Lab Guide 573

Discovery Lab 19:
DNAC Configuration Backup on
External Server (Instructor
Demo)
Overview
In this lab, you will achieve the following objective:
 Configure back-up of Cisco DNAC on an external server.

Discovery Lab 17 | © 2025 NterOne Corp. IADNACA Lab Guide 574

Task 1: DNAC Configure Backup on External Server
Activity Procedure
Complete the following steps:
Step 1 Log in to Cisco DNA Center in the browser and click on the Cisco DNA Center
icon ( ) in the upper-left corner.
Step 2 Navigate to System > Backup & Restore.

Step 3 Before you can create a backup, you need to configure the backup settings.
Click on Configure Settings.

Discovery Lab 17 | © 2025 NterOne Corp. IADNACA Lab Guide 575

 Step 4 In the Cisco DNA Center (Remote Host) tab you must add the backup server
previously configured for file sharing using the NFS protocol. Configure the
following data:
 SSH IP Address: 10.10.144.130
 SSH Port: 22
 Server Path: /var/nfsshare/BACKUP
 Username: mark
 Password: Nterone179
 Encryption Passphrase: Nterone179
Click on Apply.

Discovery Lab 17 | © 2025 NterOne Corp. IADNACA Lab Guide 576

 Step 5 In the Cisco DNA Center (NFS) tab, configure the following data:
 Host: 10.10.144.130
 Server Path: /var/nfsshare/BACKUP
Click on Apply.

Step 6 Click on Create Backup.

Step 7 Complete the fields as shown below:

 Backup Name: backup-date (In this lab backup-11thoct23.)
 Create Now
 Scope: Cisco DNA Center (without Assurance data)
Click on Create.

Discovery Lab 17 | © 2025 NterOne Corp. IADNACA Lab Guide 577

 Step 8 Wait for the status bar to complete 100%.

Step 9 Verify the status of backup is shown as SUCCESS.

Step 10 To verify the backup on external server, hover your mouse over the information
icon under Backup Name and write down the back-up ID.

Discovery Lab 17 | © 2025 NterOne Corp. IADNACA Lab Guide 578

 Step 11 Navigate to the My Labtyme web page. Click on SDAINT_Rackr > SDAINT-
Rr_Podp, right-click on the DNAC_BACKUP_SERVER link, and select Open in
New Tab. (Where r is your Rack Number and p is your Pod Number.)
This will open a new tab containing the connection to the DNAC Backup Server.

Step 12 Log in the DNAC_BACKUP_SERVER with the following credentials:

 Username: Mark

Discovery Lab 17 | © 2025 NterOne Corp. IADNACA Lab Guide 579

  Password: Nterone179

Step 13 On the Ubuntu desktop, click on the Search your computer icon.

Step 14 Under Applications click on Terminal.

Discovery Lab 17 | © 2025 NterOne Corp. IADNACA Lab Guide 580

 Step 15 Execute the following command. From the final output you can verify the backup
is created on NFS Share server with the same back-up ID in Jason format:
cd /var/nfsshare/BACKUP (Between cd and / there should be space)
ls -l
cd backup-metadata
ls -l

Step 16 Go to Cisco DNA Center and click on the Cisco DNA Center icon ( ) in the
upper-left corner. Under the Backups you can verify the backup has been
created. If needed, you can restore the back-up from this location.

Discovery Lab 17 | © 2025 NterOne Corp. IADNACA Lab Guide 581

Discovery Lab 17 | © 2025 NterOne Corp. IADNACA Lab Guide 582
Discovery Lab 7 | © 2025 Cisco Systems, Inc. IADNACA Lab Guide 583