Question

An enterprise deploys Cisco SD-Access with Cisco ISE integrated into the fabric. A new employee connects a laptop to an access port on an edge node. The network team wants the laptop to be dynamically assigned to the correct virtual network (VN) and Scalable Group Tag (SGT) based on the user's identity, without any static per-port configuration. Which mechanism enables the edge node to apply this dynamic policy after successful authentication?

Accepted Answer

ISE returns RADIUS authorization attributes that dynamically assign the endpoint to a VN and SGT via 802.1X/MAB authentication on the edge node

Answer

The border node statically maps the switchport to a VLAN and pushes the SGT to the edge node using OMP

Answer

The control plane node uses LISP map-registration to assign the SGT before authentication completes

Answer

Cisco Catalyst SD-WAN Manager pushes a device template that hardcodes the VN and SGT to each edge node access port