Question

Difficulty: HardCisco DNA Center Enabled Device Management

A network administrator is setting up a discovery job in Cisco DNA Center to scan an enterprise IPv4 subnet and onboard several existing Catalyst switches into the controller inventory. Which TWO credentials or protocol parameters must be configured within the Cisco DNA Center discovery settings to successfully discover the devices and transition them into a managed state?

  1. SNMP read/write community strings or v3 credentials for SNMP-based attribute pollingAnswer
  2. CLI credentials (SSH or Telnet) to enable direct command-line execution and configuration parsingAnswer
  3. C
    HTTP/REST API session tokens generated from the switch local web user interface
  4. D
    TACACS+ shared secret keys configured for direct controller-to-switch protocol handshakes
  5. E
    Ansible agent authentication certificates pre-installed on the switch operating system daemon

Answer

To successfully discover and bring network devices into a fully managed state within Cisco DNA Center, the discovery profile requires SNMP credentials (v2c community strings or v3 user details) and CLI credentials (SSH/Telnet usernames and passwords/enable passwords).
For Cisco DNA Center to discover devices and transition them from 'Discovered' to 'Managed' state, the discovery job profile must contain valid SNMP parameters (for initial MIB polling and device profiling) and valid CLI credentials (SSH/Telnet credentials for deep configuration inspection and command execution).

Step-by-Step Solution

1
Identify the primary protocols Cisco DNA Center uses to discover network inventory.
Cisco DNA Center relies on SNMP queries to identify device platforms, serial numbers, and system object IDs during network discovery sweeps.
SNMP provides standardized, lightweight MIB access for initial device identification.
2
Determine how Cisco DNA Center gathers detailed configuration state and performs device management.
Cisco DNA Center logs into the switch via SSH/Telnet using configured CLI credentials to parse running configurations and push provisioning changes.
CLI access allows the controller to read complete feature configurations and issue commands directly.
3
Evaluate why alternative options are incorrect for Cisco DNA Center discovery.
Local web REST API tokens, TACACS+ shared secret keys for discovery handshakes, and local Ansible agent daemons are not part of the standard Cisco DNA Center discovery profile requirements.
Cisco DNA Center utilizes agentless southbound protocols (SNMP, SSH, NETCONF) rather than local switch agent daemons or web API tokens.

Key Concept

Cisco DNA Center Network Discovery and Device Management Protocols
Rate this question