SD-Access Wireless Lab
Extend your SD-Access fabric to wireless — WLC platform preparation and AireOS-to-9800 migration, fabric wireless enablement through Catalyst Center, fabric AP onboarding over the VXLAN data plane, client onboarding and TrustSec policy enforcement, fabric roaming, and day-to-day wireless operations and troubleshooting.
The launch will be soonCourse Highlights
Wireless Architecture
Master the control plane vs. data plane split, role definitions for Catalyst Center, ISE, WLC, and fabric access points, plus ISE pxGrid and ERS API prerequisites.
WLC & Migration
Compare Catalyst 9800 HA/SSO with Embedded Wireless Controller (EWC), execute AireOS-to-9800 migrations, and onboard WLCs into Catalyst Center.
Fabric AP Onboarding
Establish CAPWAP control tunnels, verify VXLAN data tunnels from fabric APs to fabric edge switches, and configure L2-VNID values per wireless overlay.
Client Policy Enforcement
Trace client joins, verify host-tracking database registrations, configure wireless SSIDs, apply TrustSec SGT-based policies, and manage peer-to-peer blocking.
Seamless Roaming
Compare fabric intra-controller roaming with traditional mobility-group roaming and verify real-time location and host-tracking updates across fabric edges.
Operations & Troubleshooting
Monitor wireless health and assurance data in Catalyst Center, execute RMA workflows for failed APs, and address platform limitations.
Extend SD-Access to Wireless
Designed for CCIE Enterprise Infrastructure candidates and wireless/network engineers who already have SD-Access fabric experience and are ready to bring wireless into the fabric.
Gain intensive, hands-on practice extending SD-Access fabric concepts into the wireless domain, covering advanced migration, tunneling, roaming, and policy enforcement scenarios.
- AireOS to Catalyst 9800: Master platform migration paths and high-availability controller setups.
- VXLAN & CAPWAP Integration: Verify end-to-end data and control tunneling from wireless clients to fabric edges.
- Brownfield Deployments: Learn to deploy fabric wireless incrementally alongside existing local-mode sites.
Technologies Covered
- ✓ SD-Access Wireless Control Plane & Data Plane Split
- ✓ Cisco Catalyst Center & ISE Integration (pxGrid & ERS APIs)
- ✓ Catalyst 9800 HA/SSO & Embedded Wireless Controller (EWC)
- ✓ AireOS to Catalyst 9800 Configuration Migration
- ✓ Fabric Wireless Global Enablement & Site Tags
- ✓ Fabric AP Onboarding, CAPWAP Tunnels & VXLAN Data Planes
- ✓ L2-VNID Provisioning & Wireless Overlay Configuration
- ✓ TrustSec SGT-Based Policy Enforcement & Peer-to-Peer Blocking
- ✓ Fabric Intra-Controller & Host-Tracking Roaming Verification
- ✓ Wireless Guest Access & Multicast / L2 Flooding Considerations
Modules & Topics
- Describe the SD-Access Wireless architecture: control plane vs. data plane split
- Identify the roles of Catalyst Center, ISE, WLC, fabric edge, and fabric AP
- Verify ISE prerequisites (pxGrid and ERS API services) for fabric integration
- Compare Catalyst 9800 HA/SSO deployment vs. the 9800 Embedded Wireless Controller (EWC)
- Migrate a WLC configuration from AireOS to Catalyst 9800
- Onboard the WLC into Cisco Catalyst Center for fabric management
- Enable wireless fabric globally and configure the default map server
- Flag a Site Tag as fabric-enabled on the WLC
- Deploy fabric wireless incrementally alongside existing local-mode sites (brownfield)
- Onboard a fabric-mode AP and verify its CAPWAP control tunnel to the WLC
- Verify the VXLAN data tunnel from the fabric AP to its fabric edge switch
- Configure unique L2-VNID values per wireless overlay during provisioning
- Trace client join and verify host tracking database registration
- Configure SSID and radio policies for fabric-enabled WLANs
- Apply TrustSec SGT-based policy enforcement at the fabric edge for wireless clients
- Configure peer-to-peer blocking for wireless clients in the fabric
- Compare fabric intra-controller roaming to traditional mobility-group roaming
- Verify location/host-tracking updates as a client roams between fabric edges
- Monitor fabric wireless health and assurance data in Catalyst Center
- Run the RMA workflow for a failed fabric AP
- Identify current platform limitations (e.g., RMA gaps for fabric WLC/EWC-9k)
- Configure wireless guest access delivered over the SD-Access fabric
- Describe native multicast/L2 flooding considerations for the wireless overlay
Start Your Lab Experience
Lab Hours Booking
Reserve access to a dedicated, pre-wired SD-Access wireless lab environment and use your purchased lab hours whenever it suits you.
- Direct access via browser and internet connection
- Dedicated Catalyst Center, ISE, and Catalyst 9800 WLC controllers
- Full control over fabric APs, VXLAN data planes, and TrustSec SGT enforcement
- Zero hardware required on your side
- Schedule your lab session for any available date and time