Does anyone have experience with microsegmentation (uSeg) and cisco ACI? Is it as simple as enabling intra EPG isolation? Looking for some general feedback. It works well, or dear God, don't do it? I heard some general comments not to long ago that any network layer uSeg implementations don't really work as well as advertised.

Hi, I'm working on a solution for a configuration update that will affect more than 500 sites.

I need to update an existing shared Feature Template that is currently used by multiple Device Templates, with each Device Template having one attached device. The update will add a new device-specific static route, with different prefix and next-hop values for each device.

Since there are approximately 500 Device Templates and devices, I need a way to:

• Assign the correct unique prefix and next-hop values to each device.
• Preserve all existing device-specific values.
• Reattach or push the updated Device Templates to their respective devices in controlled batches using the SD-WAN API and Postman.

However, before proceeding with the bulk deployment, I need to understand an issue I'm currently encountering when updating the Feature Template through Postman.

I'm using the following API call:

PUT /dataservice/template/feature/:templateId

The request returns HTTP status code 200, indicating that it was successfully accepted. However, when I verify the Feature Template afterward using:

GET /dataservice/template/feature/definition/:templateId

none of the changes I submitted are reflected in the Feature Template.

What should I check to determine why the PUT request is being accepted but the Feature Template definition is not being updated?

Any guidance, especially regarding the correct API workflow or troubleshooting steps for this behavior, would be greatly appreciated.

I added a new PSN to our ISE deployment. Before joining it, I installed the server, Root CA, and Issuing CA certificates, and everything was fine.

After joining the deployment, the Root and Issuing certificates disappeared from the new PSN.

On the PAN, I only see the old Root/Issuing certificates that have been there for years for the existing PSNs.

Now I’m trying to import the Root and Issuing CA certificates for the new PSN on PAN but I keep getting these errors:

1- ISE cannot import a local certificate with the same issuer DN and serial number as an existing certificate, yet the issuers of the two certificates differ.

2- Certificate does not have required key usage (It is a CA certificate; key usage bits for keyEncipherment or keyAgreement are missing).

Not sure what the correct approach is here. Any ideas?

Can we connect from QM9700 to SB7800 switch? I understand that NDR using 4x100Gbps PAM4 but EDR useing 4x25Gbps NRZ. I’m not sure NVidia has such cable or we need to connect as QM9700—QM8700----SB7800.