A network architect is designing a solution to programmatically define network policies across a multi-domain infrastructure, including data center and campus networks. The goal is to apply consistent security and segmentation policies based on application requirements, irrespective of the underlying network hardware. Which Cisco platform is best suited for this intent-based policy enforcement across diverse network environments?
- ACisco Meraki Dashboard
- BCisco ACI
- CCisco DNA Center
- DCisco SD-WAN vManage
Show answer & explanationAnswer & explanation
Correct answer: C. Cisco DNA Center
Cisco DNA Center is the centralized network controller for Cisco's intent-based networking architecture, providing automation, assurance, and security across campus, branch, and multi-domain networks. It allows for consistent policy enforcement across diverse environments, aligning with the requirement for multi-domain policy definition.
Why the other options are wrong
- A. Meraki is cloud-managed, but primarily for simpler, distributed networks, not multi-domain intent-based policy.
- B. ACI is for data center automation and policy, not typically campus or multi-domain in the broader sense.
- D. SD-WAN vManage is specifically for SD-WAN deployments, managing connectivity and policies for WAN segments.
Cisco DNA Center (Multi-Domain Policy)
Cisco DNA Center serves as the central controller for Cisco's Intent-Based Networking, enabling the definition and enforcement of consistent network policies (security, segmentation, QoS) across diverse network domains including campus, branch, and integrating with data center (ACI) and WAN (SD-WAN).
- Centralized controller for intent-based networking.
- Provides automation, assurance, security.
- Enforces consistent policy across multi-domain networks.
Memory trick: To rule many lands with one law, you need a central king, like DNA Center.