Solution overview

Cisco public

Cisco User Defined Network

Solution Guide
Introduction
Cisco® User Defined Network is a Cisco network solution available through Cisco DNA In network environments
Center, which provides secure and remote onboarding of client devices and allows IT like dorm rooms, and other
staff to give each user oversight of his or her very own network partition. This enables a
multi-dwelling buildings, the
personal network experience in the shared network environment.
network is shared among the
Users can remotely and securely register their personal devices on their own from users. Today, users cannot
home or anywhere using the intuitive Cisco User Defined Network mobile app. Once the deterministically discover and
devices have been registered and the user arrives at the shared network location, their
limit access to “their devices”
wireless devices connect to the shared network and are placed into their
personal network.
on a shared network. Due to
the inherent nature of devices
Cisco User Defined Network grants both device security and control, allowing end that use link local multicast to
users the choice of who can connect to their network. The Cisco User Defined Network
broadcast their services, devices
solution also gives end users the ability to invite trusted users, such as friends, to their
personal network through the mobile app so that they can collaborate and share their
which belong to other users
devices with them. can be taken control of and
used for other purposes. This
As the solution is enabled in shared networks, users are unable to see other users’
results in poor user experience
devices in the network. Incidentally, unlike other solutions, Cisco User Defined Network
works with mDNS, UPnP, and other link local multicast or broadcast protocols. IT staff
in such environments.
also has the option of disabling unicast communication between two user defined
networks if they choose to do so through Cisco DNA Center.
©
© 2021
2019 Cisco
Cisco and/or
and/or its
its affiliates.
affiliates. All
All rights
rights reserved.
reserved.
Solution overview
Cisco public
Solution Components
Cisco Catalyst 9800
Cisco Catalyst 9800 provides enforcement of User Defined Network policies.
Cisco User Defined Network is supported with central switching mode
on Catalyst 9800-80, Catalyst 9800-40, Catalyst 9800-L and Catalyst
9800-CL.
Cisco User Defined Network solution is supported on IOS XE 17.3.1
or above.
Cisco Catalyst 9100 Access Points or Cisco Aironet® 802.11ac Wave 2
access points
Cisco User Defined Network is supported on Cisco Catalyst 9100, Cisco
Aironet® 1800, 2800, 3800, and 4800 Access Points.
Cisco DNA Center
Cisco DNA Center provides a single point to IT staff to enable the Cisco
User Defined Network solution with a single end to end workflow. Admins
can select and decide where they want to enable the solution, which SSIDs
they want to enable the solution and when they want to enable the solution.
Cisco DNA Center also provides granular visibility to end user’s User Defined
Networks through Client 360 view on Assurance. Cisco User Defined
Network solution is supported on Cisco DNA Center 2.1.1 and above.
Identity Services Engine
Identity Service Engine (ISE) provides point of authentication and
authorization for end users to connect to the network. Cisco User Defined
Network solution is supported on ISE 2.7.1 or above.
Cisco User Defined Network Cloud Service
Included as part of Cisco DNA Advantage license, Cisco UDN Cloud Service
enables users to register their devices from anywhere they want and anytime
© 2021 Cisco and/or its affiliates. All rights reserved.
they want. It allows IT staff to connect their Active Directory to define users
for which the solution will be enabled. IT staff will also get visibility and rich
insights into User Defined Network solution operation with a dashboard.
Cisco UDN Mobile App
Available both on iOS and Android, Cisco UDN mobile app provides end
users with option to register their devices from anywhere and anytime. Users
can use multiple options available in the mobile app to register their devices.
Mobile App also shows notifications and provides visibility of user’s own
devices and guest’s devices which are part of their user defined network.
Users can also invite guests (their friends and trusted users which have their
own UDN Mobile App) to their User Defined Network through Mobile App for
sharing their devices and collaboration.
Scale
Cisco User Defined Network solution scale varies as per the deployment
options of the Catalyst 9800 controller.
Cisco Catalyst 9800-80 Up to 64,000 unique User Defined
Networks per controller
Cisco Catalyst 9800-40 Up to 32,000 unique User Defined
Networks per controller
Cisco Catalyst 9800-L Up to 5,000 unique User Defined Networks
per controller
Cisco Catalyst 9800-CL 10,000, 32,000 or 64,000 unique User
Defined Networks per controller
Overall, User Defined Networks are supported across multiple controllers
depending on deployment scenario.
Solution overview
Cisco public

Deployment Licensing
To deploy User Defined Network solution, Cisco User Defined Network solution requires Cisco DNA Advantage with ISE plus licenses. These can
please refer to solution’s deployment be purchased a-la-carte or in a Cisco DNA Expansion Pack.
guide available.

Orderability
To order and enable Cisco User Defined Network solution, please refer to ordering guides of
respective components

Catalyst 9800, Catalyst 9100 or Aironet Wave 2 Access Points

https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9800-series-wireless-controllers/
nb-06-wrles-dna-sub-lic-og-cte-en.html

Identity Services Engine

https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/
guide_c07-656177.pdf

Cisco DNA Center

https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/dna-center/nb-06-
dna-center-data-sheet-cte-en.html

© 2021 Cisco and/or its affiliates. All rights reserved. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other
countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners.
The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R) C22-743756-01 11/21