Implementing and Operating Cisco SD-Access Fabric: Client Network Access Control

Client Network Access Control

Question

When a wired client connects to an edge switch in a Cisco SD-Access fabric, which component decides whether the client has access to the network?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C.

In a Cisco SD-Access fabric, the component that decides whether a wired client has access to the network is the edge node.

An edge node is a device that connects endpoints (such as wired clients) to the SD-Access fabric. The edge node is responsible for authenticating the endpoint and enforcing policies to control access to the network.

When a wired client connects to an edge switch, the edge node will receive information about the client's identity and network requirements from the switch. The edge node will then use this information to authenticate the client and apply the appropriate policies.

In order to perform authentication, the edge node may interact with other components such as the Identity Services Engine (ISE) or a RADIUS server. These components can provide additional context about the client's identity and help the edge node make informed access decisions.

However, ultimately it is the edge node that makes the final decision about whether the client is granted access to the network. The edge node will enforce policies such as VLAN assignments, quality of service (QoS) settings, and security controls based on the client's identity and network requirements.

The control-plane node in a Cisco SD-Access fabric is responsible for managing the overall fabric infrastructure, including distributing policies and routing information. While the control-plane node is involved in the overall access decision-making process, it is not directly involved in deciding whether a specific wired client is granted access to the network.