Tagged: SD-Branch
11 posts · browse all tags
-
Arista SD-Branch Part 1: The Product Map for CloudVision, AGNI and the 710P
A map of Arista's campus and branch stack: EOS switches, Wi-Fi 7 access points, CloudVision, CV-CUE and AGNI. What each piece does, where VeloCloud fits, and how this series is sourced.
-
Arista SD-Branch Part 10: Day-Two Operations, Upgrades and Automation
Running the Arista branch after go-live: Smart System Upgrade, observability and endpoint troubleshooting in CloudVision, compliance checks, and the APIs and AVD options for automation.
-
Arista SD-Branch Part 11: Arista vs Fortinet, Cisco and Juniper for the Branch
A closing comparison of Arista CloudVision and AGNI against Fortinet, Cisco and Juniper branch stacks, with the trade-offs, a design checklist, and where the Arista approach fits.
-
Arista SD-Branch Part 2: The 710P-16P Switch, PoE Budget and Port Layout
What the Arista 710P-16P gives you: port mix, PoE standards and budget, uplinks, forwarding numbers and EOS requirements, plus how to size it against Wi-Fi 7 access points.
-
Arista SD-Branch Part 3: Onboarding Switches to CloudVision with ZTP and TerminAttr
How a 710P gets into CloudVision: token onboarding, TerminAttr streaming, ZTP, and the first-run gotchas around AAA. Documented from Arista's CloudVision guides, not run.
-
Arista SD-Branch Part 4: CloudVision Studios, Port Profiles and Change Control
How CloudVision builds campus configuration: the Studios, the workspace and change-control workflow, and port profiles for data, voice and guest. With the EOS config each profile generates.
-
Arista SD-Branch Part 5: Wi-Fi 7 Access Points and CV-CUE Wireless Management
Arista's Wi-Fi 7 access point range, what separates the models, and how CV-CUE manages SSIDs, roles and wireless security. Documented from Arista specs and Test Drive guides.
-
Arista SD-Branch Part 6: AGNI Explained, Networks, Segments and Role Profiles
The AGNI object model in plain terms: access devices, networks, segments, role profiles and clients. Plus onboarding, PKI, UPSK, guest access, integrations and licensing, from Arista's datasheet.
-
Arista SD-Branch Part 7: Configuring RadSec Between EOS Switches and AGNI
The certificate and SSL profile work needed to bring up RadSec from an Arista switch to AGNI, done by hand and then through the eos_agni_radsec Ansible role, with a review of what the role does and does not do.
-
Arista SD-Branch Part 8: Wired 802.1X and MAB Policy with AGNI on EOS
The wired access policy end to end: EOS 802.1X and MAC-based authentication config, an EAP-TLS network with MAC fallback in AGNI, and the commands to verify a session from the switch and the platform.
-
Arista SD-Branch Part 9: Wireless EAP-TLS, UPSK and Guest Portal Policy with AGNI
Wireless access policy with AGNI and CV-CUE: RadSec for access points, an EAP-TLS SSID, UPSK for IoT, and a captive-portal guest SSID with VXLAN tunnelling. Documented from Arista's published lab material.