Software-Defined Access Architecture
Cisco SDA Design & Architecture enables campus the use of Virtual network (Overlay Networks) which run over Underlay Network or Physical network to achieve the Intent based network.
There are some components which needs to learn for Cisco SDA Design .
Underlay Network:
Underlay network consists of physical router, Switches that runs using traditional protocols like BGP, OSPF, etc. to provide IP connectivity so that sites are reachable to each other and devices connectivity can be achieved at each site.
Cisco DNA Center LAN automation feature provides a method to do underlay network development for new networks and uses IS-IS routed access design. DNA LAN automation uses Cisco Network Plug and Play feature to deploy unicast as well as Multicast routing configuration in underlay network.
Ovelylay Network:
Overlay network is configured on top of Underlay network in order to achieve virtual network. In Overlay network fabric Border nodes are present at boundaries of every fabric network whereas wired client are connected to Edge node and wireless clients are connected to Fabric AP.
Multiple Overlay network can run over same underlay network to support multitenancy. Overlay separation is preserved by using VRF-Lite when we extend the network outside Overlay fabric. In SD-Access Multicast configuration can be configured manually or by using LAN automation feature by DNA center.
Layer 2 Overlay: It helps to transport layer 2 frames and carry a single subnet over Layer 3 underlay. SD-Access transport IP frames without Layer 2 flooding of broadcast and unknown multicast traffic. In SD-Access Fabric Control plane node is used to address ARP functions to see MAC to IP address table lookups.
Below figure shows Layer 2 Overlay –connectivity logically switched.

Layer 3 Overlay: Layer 3 Overlay abstracts IP based connectivity over Layer 3 Underlay network and allow multiple IP network as virtual network. Example IPSEC, VXLAN, LISP.
GENERAL FAQ
Software-Defined Access (SDA) enables intent-based networking by building virtual overlay networks on top of a physical underlay network.
This architecture simplifies network management, improves segmentation, and automates policy-based connectivity across the campus. Cisco SDA Design allows organizations to implement scalable, secure, and centrally managed campus networks.
The Underlay Network is the physical infrastructure composed of switches and routers running traditional routing protocols such as IS-IS, OSPF, or BGP. It provides IP reachability between all fabric devices.
The Overlay Network runs on top of the underlay and creates virtual networks for segmentation and policy enforcement. It uses technologies like VXLAN and LISP to transport traffic across the fabric.
Cisco SDA Design integrates both layers to deliver scalable and flexible connectivity.
Cisco DNA Center provides LAN Automation, which automates underlay deployment using IS-IS as the routing protocol along with Plug-and-Play (PnP) provisioning.
This reduces manual configuration, accelerates deployment, and ensures consistent IP reachability across all fabric devices in Cisco SDA Design.
In Software-Defined Access, fabric nodes perform specific roles:
• Edge Nodes: Connect wired endpoints to the fabric.
• Fabric APs: Connect wireless endpoints to the fabric.
• Border Nodes: Connect the fabric to external networks (data center, WAN, internet).
• Control Plane Nodes: Maintain endpoint mapping information (IP-to-MAC-to-location mapping using LISP).
In Cisco SDA Design, these roles work together to enable scalable segmentation and optimized traffic forwarding.
• Layer 2 Overlay: Extends a single subnet across the fabric without traditional Layer-2 flooding. ARP suppression and control-plane learning reduce broadcast traffic.
• Layer 3 Overlay: Provides IP-based segmentation, allowing multiple virtual networks to coexist over the same physical underlay.
Technologies such as VXLAN (data plane) and LISP (control plane) are used to implement Cisco SDA Design for secure and flexible virtual networking.
Understanding the architecture is important, but real-world deployment requires hands-on practice.
For step-by-step labs, configuration walkthroughs, and real design scenarios related to Cisco SDA Design, you can enroll in our structured training programs that provide guided lab exercises and practical demonstrations.
LEAVE A COMMENT
Please login here to comment.