SD-Access Segmentation Design Guide - Cisco

← Back to document page

S Cisco VALIDATED DESIGNSD-Access Segmentation Design GuideMay 2018Table of ContentsCisco Validated DesignTable of ContentsIntroduction ........................................ ........................................ ........................................ ............1Intent-based networking and Segmentation ........................................ ........................................ .....2Understanding virtual networks and SGTs in SD-Access ........................................ ........................................ .................4Enforcement of traffic destined external to the fabric ........................................ ........................................ ......................9Defining network segments ........................................ ........................................ ...........................16Virtual networks or scalable group tags.

devices. A given network segment, and the policies it represents, may be extended anywhere within an organization where one of the business-relevant applications or functions reside. Historically, when implementing VRFs or Cisco TrustSec, manual configuration of the network infrastructure is unavoidable. Whether extending VRFs through VRF-

  Network, Cisco, Functions