Cisco DNA Assurance Overview

Cisco DNA Assurance Overview

Assurance provides a comprehensive solution to assure better and consistent service levels to meet growing business demands. It addresses not just reactive network monitoring and troubleshooting, but also proactive and predictive aspects of running a network and ensuring optimal client, application, and service performance.

Assurance provides the following benefits:

  • Provides actionable insights into network, client, and application-related issues. These issues consist of basic and advanced correlation of multiple pieces of information, thus eliminating white noise and false positives.

  • Provides both system-guided as well as self-guided troubleshooting. For a large number of issues, Assurance provides a system-guided approach, where multiple Key Performance Indicators (KPIs) are correlated, and the results from tests and sensors are used to determine the root cause of a problem, after which possible actions are provided to resolve the problem. The focus is on highlighting the issue rather than monitoring data. Quite frequently, Assurance performs the work of a Level 3 support engineer.

  • Provides in-depth health scores for a network and its devices, clients, applications, and services. Client experience is assured both for access (onboarding) and connectivity.

Assurance Architecture

Companies deal with an abundance of network data. Tackling the volume, variety, speed, and accuracy of network data is crucial for IT organizations. Assurance is designed to handle network data issues, if any.

Assurance is a multipurpose, real-time, network data collection and analytics engine that can significantly increase the business potential of network data.

Assurance simplifies and abstracts the collection and analysis layers and offers a rich set of APIs along with a web interface. By using a single set of network data, Assurance powers a broad set of use cases. These advantages streamline the operational and network management overhead of collecting and analyzing network data, thereby allowing companies to effectively focus on their business goals.

Given its flexible architecture, Assurance addresses many common use cases, including monitoring and troubleshooting, cost management, and policy discovery, while supporting the broader Cisco DNA strategy.

The following figure and the information that follows describe the Assurance architecture:

Figure 1. Assurance Architecture
Figure 1: Assurance architecture diagram, with data collection and ingestion to data correlation and analysis to data visualization and action.
  • Data Collection and Ingestion: Assurance leverages streaming technologies to collect a variety of network telemetry and contextual data in real time.

  • Data Correlation and Analysis: As and when data is ingested, Assurance correlates and analyzes the data.

  • Data Visualization and Action: Data is stored in databases and exposed through APIs to Assurance as well as other applications for capacity planning. Assurance is an open system that provides the following:

    • Collector and analytics pipeline SDKs

    • Time-series analysis

    • Graph data models and restful APIs

    • System management portal

IPv6 Address Support

Cisco DNA Center, and therefore Cisco DNA Assurance, supports IPv6 addresses. A single IPv6 address can be represented in many text formats, but Cisco DNA Center supports IPv6 address in canonical format only. The canonical format, which is shown below, is also called the normalized compressed format:

2001:db8::1:0:0:1 

User Profile Roles and Permissions

Cisco DNA Center supports role-based access control (RBAC). The roles assigned to a user profile define the capabilities that a user has permission to perform. Cisco DNA Center has three main default user roles:

  • SUPER-ADMIN-ROLE

  • NETWORK-ADMIN-ROLE

  • OBSERVER-ROLE

The SUPER-ADMIN-ROLE gives users broad capabilities and permits them to perform all actions in the Cisco DNA Center GUI, including creating custom roles and assigning them to user profiles. The NETWORK-ADMIN-ROLE and the OBSERVER-ROLE have more limited and restricted capabilities in the Cisco DNA Center GUI.

If you’re unable to perform an action in Cisco DNA Center, the reason might be that your user profile is assigned a role that doesn’t permit it. For more information, check with your system administrator or see the Cisco DNA Center Administrator Guide.

Start with Assurance

To start using Assurance, you must first configure the Cisco DNA Center settings so that the server can communicate outside the network.

After you configure the Cisco DNA Center settings, your current environment determines how you start using Assurance:

  • Existing infrastructure: If you have an existing infrastructure (existing deployment), start by running Discovery. After you run Discovery, all your devices are displayed on the Inventory window. For more information, see Basic Setup Workflow.

  • New or nonexisting infrastructure: If you do not have an existing infrastructure and are starting from scratch (new deployment), design a network hierarchy. For information about designing a network hierarchy, see the Cisco DNA Center User Guide.