--- title: Cisco SD Access Deployment description: Cisco SD Access is the concept that we can configure the network from a centralised management system. Here's an introduction to the underlay and overlay. image: https://blog.iptel.com.au/hubfs/Blogs/Cisco%20SDA%20Deployment/Cisco%20SDA%20Deployment%20-%20Instagram.jpg --- [![IPTellogo-byline-2020-dark-v2-pnd-optimised-500 (1)](https://blog.iptel.com.au/hs-fs/hubfs/IPTellogo-byline-2020-dark-v2-pnd-optimised-500%20(1).png?width=200&height=59&name=IPTellogo-byline-2020-dark-v2-pnd-optimised-500%20(1).png "IPTellogo-byline-2020-dark-v2-pnd-optimised-500 (1)")](https://iptel.com.au) - [Home](https://iptel.com.au/) - [Solutions](https://iptel.com.au/solutions) Technologies - [Cisco Access Manager](https://iptel.com.au/technologies/cisco-access-manager) - [Cisco Catalyst Centre](https://iptel.com.au/technologies/cisco-catalyst-center) - [Cisco Meraki](https://iptel.com.au/technologies/cisco-meraki) - [Cisco SDA Fabric](https://iptel.com.au/technologies/cisco-sda-fabric) - [Industrial IoT](https://iptel.com.au/technologies/industrial-iot) - [LAN](https://iptel.com.au/technologies/lan) - [Security and Cisco ISE](https://iptel.com.au/technologies/security-and-cisco-ise) - [Thousand Eyes](https://iptel.com.au/technologies/thousandeyes) - [Virtualisation](https://iptel.com.au/technologies/virtualisation) - [Wi-Fi](https://iptel.com.au/services/wi-fi-surveys) Services - [Backup Assure](https://iptel.com.au/services/backup-assure) - [Cisco URWB](https://iptel.com.au/services/cisco-urb) - [Cisco Webex Calling](https://iptel.com.au/services/cisco-webex-calling) - [Eco-Friendly Network Refresh](https://iptel.com.au/services/eco-friendly-network-refresh) - [Network Equipment Supply](https://iptel.com.au/services/network-equipment-supply) - [Splunk](https://iptel.com.au/services/splunk) - [Wi-Fi Assurance Review](https://iptel.com.au/services/wi-fi-assurance-review) - [Wi-Fi Surveys](https://iptel.com.au/services/wi-fi-surveys) - [Industries](https://iptel.com.au/industries) Education and Healthcare - [Education and Campuses](https://iptel.com.au/industries/education) - [Healthcare and Clinical](https://iptel.com.au/industries/healthcare) - [Aged Care](https://iptel.com.au/industries/aged-care) Enterprise - [Enterprise Networks](https://iptel.com.au/industries/enterprise) Industrial - [Mining and Camps](https://iptel.com.au/industries/mines) - [Utilities](https://iptel.com.au/industries/utilities) Retail & Warehousing - [Retail](https://iptel.com.au/industries/retail-and-stores) - [Warehousing](https://iptel.com.au/industries/warehousing) Entertainment - [Stadiums](https://iptel.com.au/industries/stadiums) - [Hospitality](https://iptel.com.au/hospitality-and-hotels) - [MSP](https://iptel.com.au/managed-services) Meraki MSP - [Meraki Access and Security](https://iptel.com.au/managed-services/meraki-access-and-security) - [Meraki SD Wan](https://iptel.com.au/managed-services/meraki-sd-wan) Cisco MSP - [Cisco Secure Access](https://iptel.com.au/managed-services/cisco-secure-access) - [Security Service Edge](https://iptel.com.au/manged-services/security-service-edge) FSO MSP - [Full Stack Observability](https://iptel.com.au/managed-services/full-stack-observability) Meeting Rooms MSP - [Meeting Rooms as a Service](https://iptel.com.au/managed-services/meeting-rooms-as-a-service) - [Blog](https://blog.iptel.com.au) - [Resources](https://iptel.com.au/resources) Free Resources - [Top Wi-Fi Secrets](https://iptel.com.au/top-8-wi-fi-secrets) - [Cisco SDA Fabric](https://iptel.com.au/the-cios-guide-to-sda-fabric) - [Catalyst Center Enablement](https://iptel.com.au/cisco-catalyst-center-enablement) Assessments - [Cloud AI Assessment](https://score.iptel.com.au/cloud-ai-assessment) - [Collaboration Assessment](https://score.iptel.com.au/collaboration-assessment) - [Network Assessment](https://score.iptel.com.au/network-assessment) - [Security Assessment](https://score.iptel.com.au/security-assessment) - [Splunk Assessment](https://score.iptel.com.au/splunk-assessment) Tools - [Automating Meraki](https://www.automatingmeraki.com) - [MAC Address Converter](https://iptel.com.au/resources/mac-address-converter) - [MSP Assessment Tool](https://score.iptel.com.au/cisco-managed-services) - [Thousand Eyes Option Tool](https://score.iptel.com.au/thousandeyes) Demos and Design - [Request a Meraki Demo](https://iptel.com.au/free-meraki-demo) - [FREE Meeting Room Design](https://iptel.com.au/schedule-meeting-room-design-session) - [Catalyst Center Enablement](https://iptel.com.au/cisco-catalyst-center-enablement) - [About](https://iptel.com.au/about-us) IPTel Solutions - [About us](https://iptel.com.au/about-us) - [Job Applications](https://careers.iptel.com.au/job-application) - [Privacy Policy](https://iptel.com.au/privacy-policy) - [Careers Blog](https://careers.iptel.com.au) Contact Us - [Contact Us Form](https://iptel.com.au/contact-us) - [Email Us](mailto:sales@iptel.com.au) Customer - [Customer Feedback](https://iptel.com.au/customer-feedback) - [Customer Referral](https://iptel.com.au/customer-referral) - [Terms and Conditions](https://iptel.com.au/terms-and-conditions) News Stories - [IPTel partners for monitoring for Meeting Rooms as a Service](https://www.commsbusiness.co.uk/content/news/highlight-partners-with-iptel-solutions) - [Webex Monitoring with Highlight](https://itbrief.co.uk/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [ITBrief with Meeting Room Monitoring](https://itbrief.com.au/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [Cisco Webex Meeting Rooms Monitoring](https://telconews.co.uk/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [IPTel adopts Highlight](https://itbrief.com.au/story/iptel-adopts-highlight-to-enhance-managed-services) - [Highlight MSP Upgrade](https://datacentre.solutions/news/71753/iptel-solutions-upgrade-with-highlights-service-platform) - [Cisco 360](https://www.crn.com.au/news/2026/networking/aussie-partners-react-cisco-360) - [DP World Transformation](https://www.cisco.com/site/us/en/about/case-studies-customer-stories/dp-world.html) - [Cisco Managed Services](https://www.arnnet.com.au/article/1251771/how-partners-can-take-a-leap-of-faith-with-managed-services.html) - [Project Delivery Excellence](https://channellife.com.au/story/cisco-honours-top-nz-partners-cisco-live) - [Great Place to Work](https://greatplacetowork.com.au/companies/iptel-solutions/) - [Wi-Fi Doesn't have to be Unreliable](https://www.techpartner.news/feature/iptel-wi-fi-doesnt-have-to-be-unreliable-494069) Buying from IPTel - [Buying Panels](https://iptel.com.au/professional-supply-panels) - [IPTel Store](https://store.iptel.com.au) - [Request a Quote](https://iptel.com.au/request-a-quote) - [Managed Services](https://iptel.com.au/managed-services-enquiry) Case Studies - [DP World Video](https://blog.iptel.com.au/hubfs/Case%20Studies/DP%20World_Case_Study.mp4) - [DP World](https://blog.iptel.com.au/dp-world-case-study) - [Backup Assure](https://blog.iptel.com.au/backup-assure-a-disaster-recovery-case-study) - Home [Get in Touch](https://iptel.com.au/contact-us) This is a search field with an auto-suggest feature attached. - There are no suggestions because the search field is empty. ## Cisco SD Access Deployment Sept 25, 2025 At IPTel we've been working on the deployed of Cisco SD Access. This is pretty new technology for most people and so has a bit of mystery to how this is deployed. In this blog, we'll take a look at how a real world deployment of Cisco SD Access looks. ## ![Cisco SDA Deployment](https://blog.iptel.com.au/hs-fs/hubfs/Blogs/Cisco%20SDA%20Deployment/Cisco%20SDA%20Deployment.jpg?width=2260&name=Cisco%20SDA%20Deployment.jpg) --- ## Background to Cisco SD Access For many years, networking engineers have been lovingly building and configuring enterprise networks with an almost endless variety of tools and best practices, which we have been cobbled together over years. The CLI was the main method of provisioning these devices, and with the help of spreadsheets and hand-crafted script we artisanally deployed networks like precious little snowflakes. Enter [Cisco DNA Center](https://blog.iptel.com.au/cisco-dna-center), which is the management plane of [Cisco’s Software Defined Access strategy.](https://blog.iptel.com.au/software-defined-networking) When we think of our network as code, it means that we can repeatedly execute the same steps on some piece of hardware without needing to explicitly care about the underlying details. Say goodbye to those Excel configuration scripts! ASSOCIATED BLOGS: - [Cisco DNA Center Enablement](https://blog.iptel.com.au/cisco-dna-center-enablement) - [Cisco SDA Fabric](https://iptel.com.au/technologies/cisco-sda-fabric) - [Software Defined Networking Explained](https://blog.iptel.com.au/software-defined-networking) - [Cisco AI Analytics in operation](https://blog.iptel.com.au/cisco-ai-analytics-in-operation) - [Cisco Machine Learning and AI](https://blog.iptel.com.au/cisco-machine-learning-and-ai) --- ![DNACenterConsiderations1](https://blog.iptel.com.au/hs-fs/hubfs/Stock%20Images/Imported_Blog_Media/DNACenterConsiderations1.png?width=300&name=DNACenterConsiderations1.png) ## Cisco DNA Center Automation I won’t explain [Cisco SDA (Software Defined Access)](https://blog.iptel.com.au/what-is-sda-fabric) here, but I wanted to share with you how impressive the DNAC LAN Automation is, since it can accelerate your fabric deployment. In essence, SDA is an overlay technology that runs on a layer 3 underlay. One misconception is that the underlay must run IS-IS routing protocol, and that it has to be built by DNAC. The underlay must be layer 3, but the routing protocol is up to you. If however, you chose to build your underlay using [Cisco DNA Center](https://blog.iptel.com.au/cisco-dna-center), then it will be built using IS-IS during the LAN Automation process. Our friends in the data centre have been using APIC-EM for some time to automatically provision device in the data centre. APIC-EM is one component of DNA Centre, and it deserves a bit more attention. ASSOCIATED BLOGS:  - [Cisco SD-Access Lab](https://blog.iptel.com.au/cisco-sd-access-lab) --- ## Cisco SDA Fabric **Imagine the scenario:** You are building an SDA fabric in a campus and you have 50 edge switches (e.g. C9300 or C9200) to commission. How do you go about it in the most efficient manner to save having to send expensive resources to site to commission devices? How about zero touch deployment, or Plug and Play, as Cisco calls it? This is where Cisco DNA Architecture comes in to play. There is a little bit of upfront planning in DNAC, but the process is literally as simple as discovering your first seed device (e.g. a border fabric node) and telling DNAC to use that device as the starting point for PnP ([we've also got some blogs exploring how Meraki does this](https://blog.iptel.com.au/meraki-cloud-wifi)). The onsite personnel rack and stack all the switches in factory defaulted mode and cable them up in the typical three-tiered Access/Distribution/Core model. Out of the box, the switches will power up and run a PnP agent that listens for instructions from the seed device. Within minutes DNAC will start pushing configuration to all the devices using a pool of IP addresses that have been assigned to the underlay. Devices receive hostnames (optionally related to serial numbers if required), loopback addresses and all the AAA, SNMP, NTP, Device Tracking, and golden software image. Sit back and watch the underlay being built. ASSOCIATED BLOGS: - [Cisco SDA Fabric Key Concepts](https://blog.iptel.com.au/cisco-sda-fabric-key-concepts) - [Software Defined Networking: Explained](https://blog.iptel.com.au/software-defined-networking) --- ## Cisco SDA Fabric: Underlay Once the underlay has been built, Cisco DNAC adds all the device into its inventory and then you can manage/provision these devices. Provisioning the devices will ensure that they are added to the correct site/building, and if you have ISE integrated to DNAC, then all of the devices will be added into ISE for device administration. It couldn’t be smarter than this, because the configuration will be done according to Cisco best practice – gone are the days of juggling multiple configuration snippets for each device type, operating system and feature. ASSOCIATED BLOG: - [DNA Center Beginners Guide](https://blog.iptel.com.au/cisco-dna-center) - [What is SDA Fabric](https://blog.iptel.com.au/what-is-sda-fabric) --- ## Cisco SDA Fabric: Overlay When deploying the overlay fabric, DNAC really starts to shine. If you don’t believe me, then consider the complexity involved in configuring a Centralised Web Auth guest portal on a C9800 platform, with ISE hosting the web portal. There are many moving parts in ISE to build the portal, create the Policy Set and Policy Results. On the C9800 wireless controller there are redirection ACLs (which follow a different logic to the old AireOS) and all the AAA commands required to achieve URL redirection. You may spend a day or more figuring all this out and perhaps you missed a permit/deny somewhere along the lines. With SDA you will design and deploy a guest portal within DNAC without touching ISE or the WLC. This is what is meant by network as code – create the intent in DNAC and allow the tool to push the commands out to the devices. Every journey starts with the first step, and DNAC gives us a leg up with great features such as LAN Automation. ASSOCIATED BLOGS: - [How to Build an SDA Fabric Lab: Part 1](https://blog.iptel.com.au/cisco-sd-access-lab-part-1) - [How to Build an SDA Fabric Lab: Part 2](https://blog.iptel.com.au/cisco-sd-access-lab-part-2) --- ## Cisco SDA Deployment: Summary Cisco DNA Center, [Cisco DNA Spaces](https://blog.iptel.com.au/cisc-dna-spaces) and [Software Defined Access](https://blog.iptel.com.au/software-defined-networking)are big topics in the Cisco world. The terms underlay (the routing layer) and the overlay (the contract layer, at which clients communicate) are at once familiar topics, but also new. They are a rebuilding of how we have approached networking over the years (we all know the OSI stack right?), but with a new twist. The network is now managed via a GUI. Those of us that have been in networking a while (over 25 years now!) have loved the CLI - its quick and efficient. [Cisco Machine learning and Cisco AI Analytics](https://blog.iptel.com.au/cisco-machine-learning-and-ai) are going to be big concepts in networking - the ability to alert on changes in behaviour will help cut down on alarm fatigue. With so much larger networks, with a myriad of features, the time is here now to begin the journey to software defined networking. ASSOCIATED BLOGS: - [SD Access Deployment](https://blog.iptel.com.au/cisco-sda-deployment) - [Zero Trust Architecture](https://blog.iptel.com.au/zero-trust-architecture) - [Zero Trust Deployment](https://blog.iptel.com.au/zero-trust-deployment) - [DNA Center Beginners Guide](https://blog.iptel.com.au/cisco-dna-center)   #### Related Articles ###### [What is Cisco SDA Fabric?](https://blog.iptel.com.au/what-is-sda-fabric) Oct 18, 2025 ###### [Cisco SD-Access Lab: Part 1](https://blog.iptel.com.au/cisco-sd-access-lab-part-1) May 9, 2025 ###### [Electronic Shelf Labelling](https://blog.iptel.com.au/electronic-shelf-labelling) July 24, 2026 ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "IPTel Solutions", "url" : "https://blog.iptel.com.au/author/iptel-solutions" }, "dateModified" : "2026-05-12T09:53:27.403Z", "datePublished" : "2025-09-25T04:38:01.000Z", "headline" : "Cisco SD Access Deployment", "image" : [ "https://blog.iptel.com.au/hubfs/Blogs/Cisco%20SDA%20Deployment/Cisco%20SDA%20Deployment%20-%20Instagram.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.iptel.com.au/cisco-sda-deployment", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.iptel.com.au/hubfs/IPTel_Solutions_February2020%20-%20Header%20SiteMap/Images/IPTellogo-byline-2020-dark-v2.png" }, "name" : "IPTel Solutions Pty Ltd" } } ```