Return to your Visual Studio Code Terminal window. Create the host_vars directory for your Site1 ISN fabric.
mkdir -p host_vars/site1-isn
For your site1-isn fabric, create a file named fabric.nac.yml in the host_vars/site1-isn directory.
This fabric is also a small representation in this lab, so all of your data model definitions for the fabric can be contained in a single file.
Note that in the data model below, the multisite section is introduced.
You still define the topology of the fabric switches, interfaces, and policies as before. The interfaces defined on the ISN switch include a loopback interface for the route server and a routed interface to connect to the Site2 ISN. In the policy section, an external BGP neighbor policy is defined to peer with Site2 ISN using an ND policy template. Note that interface Ethernet1/3 shown in the diagram is not defined in the data model — ND will automatically configure it when you enable the Multi-Site extension later in the lab.
touch ~/workspace/ndlab/nac/host_vars/site1-isn/fabric.nac.yml
code-server -r ~/workspace/ndlab/nac/host_vars/site1-isn/fabric.nac.yml
Copy and paste the following content into the fabric.nac.yml file that is now open in your VSCode editor.
---
vxlan:
fabric:
name: site1-isn
type: ISN
multisite:
isn:
bgp_asn: "65101"
topology:
switches:
- name: site1-isn1
serial_number: 9FGWJ9WFIXY
role: core_router
management:
default_gateway_v4: 10.15.9.1
management_ipv4_address: 10.15.9.17
interfaces:
- name: Loopback101
mode: loopback
description: Route Server Loopback
enabled: true
ipv4_address: 10.101.101.101
ipv4_route_tag: 54321
- name: Ethernet1/1
mode: routed
description: To Site2 ISN1 Eth1/1
enabled: true
ipv4_address: 10.0.0.0/31
policy:
policies:
- name: ebgp_neighbor
template_name: ext_bgp_neighbor
template_vars:
asn: "65101"
NEIGHBOR_ASN: "65201"
NEIGHBOR_IP: "10.0.0.1"
IF_NAME: "Ethernet1/1"
ENABLE_LOG_NEIGHBOR_CHANGE: true
groups:
- name: isn
policies:
- name: ebgp_neighbor
switches:
- name: site1-isn1
groups:
- isn
Like previous fabrics, Site1 ISN will leverage the same ND group and ND instance, but specify the Site1 ISN fabric as a logical host.
touch ~/workspace/ndlab/nac/hosts.site1_isn.yml
cat << EOF >> ~/workspace/ndlab/nac/hosts.site1_isn.yml
---
# Inventory Information For Site1 ISN Fabric
nd:
hosts:
site1-isn:
ansible_host: 10.15.0.35
EOF
Make sure you are in your root Ansible directory.
cd ~/workspace/ndlab/nac
From the root Ansible project directory execute the following command:
ansible-playbook -i hosts.site1_isn.yml vxlan.yml
Upon a successful run of the playbook your output should look as follows:
<... SNIP ...> PLAY RECAP ************************************************************************************************************************************************************************** site1-isn : ok=45 changed=4 unreachable=0 failed=0 skipped=20 rescued=0 ignored=0 PLAYBOOK RECAP ****************************************************************************************** Playbook run took 0 days, 0 hours, 1 minutes, 45 seconds TASKS RECAP ********************************************************************************************* Wednesday 03 June 2026 00:34:58 +0000 (0:00:00.058) 0:01:45.466 ******** =============================================================================== cisco.nac_dc_vxlan.create : Execute Create Resources -------------------------------------------- 59.91s cisco.nac_dc_vxlan.deploy : Execute Deploy of Resources ----------------------------------------- 29.62s cisco.nac_dc_vxlan.common : Build Resources ------------------------------------------------------ 2.33s cisco.nac_dc_vxlan.connectivity_check : Get Cisco Nexus Dashboard Fabric Controller Version ------ 1.70s cisco.nac_dc_vxlan.remove : Execute Remove Resources --------------------------------------------- 1.32s cisco.nac_dc_vxlan.deploy : Execute Deploy of Resources ------------------------------------------ 1.22s cisco.nac_dc_vxlan.validate : Copy Service Model Data to Host ------------------------------------ 0.81s cisco.nac_dc_vxlan.connectivity_check : Verify Authorization to Nexus Dashboard ------------------ 0.72s cisco.nac_dc_vxlan.validate : Copy Extended Service Model Data to Host --------------------------- 0.63s cisco.nac_dc_vxlan.validate : Stat Factory Defaults ---------------------------------------------- 0.55s cisco.nac_dc_vxlan.connectivity_check : Verify Connection to Nexus Dashboard --------------------- 0.54s cisco.nac_dc_vxlan.connectivity_check : Get Cisco Nexus Dashboard Version ------------------------ 0.43s cisco.nac_dc_vxlan.validate : Stat the Golden Service Model Data --------------------------------- 0.34s cisco.nac_dc_vxlan.validate : Stat the Extended Service Model Data ------------------------------- 0.34s cisco.nac_dc_vxlan.remove : Log Deploy During Remove Info Message -------------------------------- 0.26s cisco.nac_dc_vxlan.connectivity_check : Set Cisco Nexus Dashboard Fabric Controller Version Var --- 0.22s cisco.nac_dc_vxlan.common : Display Change Flag Values ------------------------------------------- 0.21s cisco.nac_dc_vxlan.validate : Role Entry Point - [cisco.nac_dc_vxlan.validate] ------------------- 0.21s cisco.nac_dc_vxlan.create : Display Create Resources Summary ------------------------------------- 0.21s cisco.nac_dc_vxlan.remove : Display Remove Resources Summary ------------------------------------- 0.21s ROLES RECAP ********************************************************************************************* Wednesday 03 June 2026 00:34:58 +0000 (0:00:00.060) 0:01:45.467 ******** =============================================================================== create ----------------------------------------------------------------- 60.17s deploy ----------------------------------------------------------------- 30.97s validate ---------------------------------------------------------------- 5.31s connectivity_check ------------------------------------------------------ 3.80s common ------------------------------------------------------------------ 3.02s remove ------------------------------------------------------------------ 1.85s common_global ----------------------------------------------------------- 0.05s ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ total ----------------------------------------------------------------- 105.17s
site1-isn in the list of fabrics; click it.
If your site1-isn is not showing, please try clicking the Refresh button in the top-right of the Fabrics pane.
In-Sync for your switches. If not, please click the refresh button to the right of the Actions button
Navigate back to your VSCode application.
Please continue to the next section to model and set up your Site2 ISN fabric.