Unified Access Policy
This companion guide describes how to configure and deploy Unified Access Policy. This guide provides use case scenarios with topology information, configuration examples, and validation output.
Over the past decades, network security and policy enforcement have typically been applied to client traffic as it leaves the network. This approach usually relies on macrosegmentation through a firewall that controls traffic between VLANs and toward corporate VPNs or the internet. However, it does not protect against infected clients spreading malware to other devices within the same network or VLAN.
To mitigate these risks, microsegmentation is required to permit or deny traffic between clients within the same VLAN. Traditional approaches have included the use of private VLANs or VXLAN group-based policies. Private VLANs can be complex to manage, and VXLAN group-based policies are only supported in certain EVPN fabric designs. Both approaches also present challenges when integrating Wi-Fi clients.
Unified Access Policy enhances these capabilities by enabling simplified microsegmentation within the same VLAN in a distributed branch environment, addressing the limitations mentioned above. It is also designed to support microsegmentation when integrating access points and campus fabric architectures where this was previously not feasible. This Network Configuration Example provides an overview of how Unified Access Policy operates, offers integration recommendations, and includes configuration examples for reference.
Table of contents
- UAP Microsegmentation
- UAP Campus Fabric Designs
- UAP Branch Designs
- UAP Policy Considerations
- UAP Configuration Examples