ADD SOLUTION
CISCO TECHNOLOGY • ADD SOLUTION ENGINEERING

Cisco: from connectivity to operations, a network with clear criteria

Architecture, deployment and operations for LAN, Wi-Fi, site-to-site connectivity and data center networks with verifiable decisions.

Catalyst, Cisco Wireless, Catalyst SD-WAN, Nexus, ACI and ISE are framed by their architectural role, compatibility, software and applicable licenses.

TECNOLOGIA CISCOArquitetura de rede
LANWI-FIWANDATA CENTER
DIAGNÓSTICO · DESENHO · IMPLANTAÇÃO · OPERAÇÃO
CISCO NA ARQUITETURA

Cisco: from connectivity to operations, a network with clear criteria

An enterprise network must connect people, applications and sites without turning every expansion into an operational exception. With Cisco technologies, ADD Solution works on architecture, deployment and operations for LAN, Wi-Fi, site-to-site connectivity and data center networks. The starting point is understanding the existing environment, critical applications and who will manage the infrastructure after delivery. Based in São José do Rio Preto, ADD Solution has worked in technology engineering since 2011. For each project, we translate capacity, segmentation, continuity and management requirements into verifiable decisions: which families make sense, which licenses are needed, what can be reused and how to validate the change.

ENGENHARIA CISCO

Architecture starts with the problem the network needs to solve

Dropped videoconferences, unstable roaming, congested uplinks and slow fault localization may have different causes. Buying faster equipment alone does not identify those causes. Our work can start with inventory, topology analysis, traffic assessment and a review of DNS, DHCP, authentication, power and cabling dependencies. Sizing considers competition between applications and the capacity available when a component fails. It must also distinguish forwarding performance, port availability, PoE power capacity and software features. These criteria guide a project the team can understand, maintain and expand.

Technical deliverables may include logical and physical designs, a bill of materials, compatibility matrix, addressing plan, access policy, migration plan and acceptance criteria. Scope, responsibilities and service terms are defined in the proposal.
ENGENHARIA CISCO

Cisco families and their roles in the infrastructure

Architectural role comes before model selection. Each family requires validation of hardware, software, licensing, integration and lifecycle.

Campus switching: Catalyst and Cisco Smart Switches

In the Catalyst 9000 portfolio, the 9200/9200CX families serve access scenarios; 9300/9300X, stackable enterprise access; 9400, modular access; 9500/9500X, fixed core and aggregation; and 9600, modular core and aggregation. This structure helps select the device's role before comparing variants. Interfaces, power supplies, modules, stacking and features must be checked by model and version. The portfolio also includes Cisco C9350 for access, C9550 for fixed aggregation and core, and C9610 for modular core. These are Cisco C9000 Smart Switches families, with their own hardware, software and subscription rules. Similar naming does not justify treating any existing Catalyst as equivalent, nor does it imply mandatory replacement. The assessment must preserve useful investments and check the evolution path for each installation.

Enterprise Wi-Fi: access points and controllers

The project may involve Wi-Fi 6/6E and Cisco Wireless Wi-Fi 7 generations, according to device profiles, density, environment and refresh cycle. AP families and Catalyst 9800/CW9800 controllers provide deployment alternatives; cloud management through Meraki Dashboard also depends on platform eligibility. The vendor matrix determines the supported combination. Coverage is only part of the problem. We plan channels, power, capacity per area, client movement and integration with the wired network. Features such as MLO and wider channels depend on the AP, client, software and permitted installation conditions. An advertised radio speed does not represent an application's guaranteed usable throughput.

Branches and WAN: Catalyst SD-WAN

Catalyst 8000 Edge platforms are part of the Catalyst SD-WAN ecosystem, with physical and virtual alternatives for connecting branches, data centers and cloud environments. Selection must consider encrypted traffic, enabled services, interfaces, available connectivity and licensing. In WAN engineering, redundancy must be tested with actual link failures and quality degradation. Important decisions include which applications can access the internet locally, how internal networks will be accessed and where to apply inspection and security policies. SD-WAN and firewall responsibilities must be explicitly designed.

Data center: Nexus, NX-OS, ACI and Nexus Dashboard

The Nexus 9000 portfolio brings together families for data center networks. Depending on hardware and version, the project can adopt NX-OS, a VXLAN EVPN fabric or Cisco ACI. Selection considers leaf or spine roles, interfaces, scale, telemetry and support for the desired operating mode. The Nexus 9000 name alone does not guarantee all these features. ACI uses its own policy model and APIC controllers; an NX-OS/VXLAN EVPN deployment has different organization and tools. The architecture should be chosen according to existing integrations, teams and operations. Migration between models requires design, compatibility and an appropriate window. Nexus Dashboard centralizes data center operational functions. In the current unified generation, capabilities previously presented as Fabric Controller, Insights and Orchestrator have become part of a unified product. DCN entitlements and support matrices still determine available functions. Materials from earlier versions must be read in their context.

Identity and access: Cisco ISE

Cisco Identity Services Engine contributes to the network access control strategy, with features that vary by version, license and integration. Authentication, device classification and identity-based policies help organize who can access which services. Deployment must consider certificates, directories, devices without a supplicant, guests and recovery procedures.

ENGENHARIA CISCO

Traditional campus or fabric: choose responsibly

A network with well-defined access, distribution and core layers can serve many environments. Where mobility, segmentation and scale justify greater automation, Cisco SD-Access is an alternative. The architecture brings together IP underlay, overlay, border, control and access nodes, along with policy integration. The Cisco guide consulted describes a specific Catalyst Center baseline and control architecture; it does not prescribe a universal version. The project must explain what remains outside the fabric: shared services, external connections and security boundaries do not disappear with automation. We define where each failure domain ends, how segments communicate and how the team verifies a policy. Before expanding the design, a pilot must validate legitimate access and expected blocking.

ENGENHARIA CISCO

Management: define the configuration source of truth

Catalyst Center and Meraki Dashboard serve different operating models. In current Cloud Management with IOS XE documentation, configuration can originate in the cloud or on the device. In the first case, Dashboard and Meraki APIs are the configuration reference; in the second, local CLI configuration and compatible tools remain relevant. The choice affects change processes, integrations, administrative access and recovery. Not every hardware platform or feature is available in every mode and release. Some conversions and reversions have restrictions and may require support and specific procedures. ADD Solution proposes validating the management model before migration, with a configuration copy, dependency inventory and viable rollback plan.

MÉTODO DE ENTREGA

Deployment with evidence of functionality

Tests vary by project. They may include uplink loss, removal of a power supply, authentication unavailability, controller recovery, inter-segment testing and recovery after a reboot. The goal is to find hidden dependencies before an incident exposes them.

  1. Diagnostics and design.

    We assess priorities, inventory and dependencies. We document sizing assumptions and gaps that require measurement.

  2. Preparation.

    We check materials, transceivers, power, versions, licenses and management requirements. Baseline configurations must follow the approved design.

  3. Pilot.

    We exercise a representative area or group, including authentication, critical applications, telephony where present and movement between APs.

  4. Phased migration.

    Each stage has prerequisites, an owner, a window, stop criteria and a rollback path. Communication reflects the expected impact.

  5. Acceptance and handover.

    We document tests, the final configuration, topology, outstanding issues and operating procedures. Documentation must reflect the delivered environment.

ENGENHARIA CISCO

Operations guided by diagnostics and lifecycle

After deployment, alarms must lead to action. Operations can track interface errors and drops, utilization, availability, client behavior, authentication, PoE consumption and capacity. A change history helps distinguish gradual degradation from a problem introduced by a change. Updates must consider compatibility and environmental risks. Release notes, security advisories, known limitations and lifecycle dates must form part of the assessment. In the Nexus portfolio, for example, Cisco publishes separate notes for NX-OS and ACI-mode; confusing these tracks compromises the analysis.

We also recommend periodic reviews of configuration restoration, certificate validity, subscription status and administrative access. Service, hours, escalation and vendor coverage are specific contractual components, not implicit guarantees of any equipment.
ENGENHARIA CISCO

Technical and commercial limits that must remain visible

PoE is part of the Wi-Fi design.

The power mode can limit radios, ports and functions. For the 9176 family, the data sheet documents different behavior according to power source and release. This example must not be generalized to other APs.

Wi-Fi 7 requires an appropriate license.

Wi-Fi 7 APs require an active license for full functionality. The licensing model, controller and minimum release must be confirmed for each AP and management mode.

Subscription and support must be included in total cost.

Software tiers, term, features, renewal and expiration consequences must be included in the commercial breakdown. Rules are not the same across all portfolios.

Redundancy does not eliminate every interruption.

High-availability features must be combined with topology, power, protocols and testing. An upgrade procedure needs validation for the installed combination.

Regional availability must be confirmed.

Model, regulatory domain, applicable certification and support for band usage must be verified for Brazil. A global page does not demonstrate regulatory approval or stock availability.

DESIGN DECISIONS

Perguntas frequentes

Are Catalyst and Nexus the same thing?

They are portfolios with different positioning. Catalyst is a reference for campus networks; Nexus serves data center networks. The decision considers role, software, integration and operations, beyond ports. One model must not be replaced by another solely because it offers similar nominal capacity.

Can every Catalyst switch be managed through Meraki Dashboard?

No. The exact model, version, license and supported configuration mode must be checked. Current features in use and migration restrictions must also be assessed. Current documentation distinguishes cloud and device configuration.

Must I deploy SD-Access to use Cisco on campus?

No. The project can retain a conventional architecture or assess SD-Access when automation and segmentation justify that choice. The design must consider team skills and operational effort as well as the intended features.

Can I replace old APs with Wi-Fi 7 in the same locations?

Replacement requires assessment of radio coverage, cabling, PoE, uplinks, clients and software. The previous design may not reflect expected behavior on new bands or with more users. A pilot reduces the risk of replacing equipment without solving the original problem.

Will the maximum advertised Wi-Fi speed be each user's speed?

There is no such guarantee. Experience depends on distance, interference, contention, client capabilities and the path to the application. Acceptance should measure real usage scenarios and agreed criteria rather than assume that the sum of radio rates is delivered to each individual.

Does Nexus Dashboard automatically replace any old NDFC installation?

Moving to the unified product requires analysis of version, platform, scale, licensing and upgrade path. Product unification changes how services are presented and operated, but does not eliminate migration validation.

Can existing switches, cabling and authentication be reused?

Yes, where technical conditions allow. Inventory identifies reusable components and limitations. Interoperability, support, power, capacity and security must be tested. The proposal must distinguish what will be retained, updated or replaced, with a rationale for each decision.

What should I gather to request an assessment?

Available topology, equipment and version inventory, number of sites and users, critical applications, observed difficulties and change-window restrictions. Floor plans help with Wi-Fi. If some of this information does not exist, gathering it can be included in the diagnostics.

SOLUÇÕES RELACIONADAS

Networking e wireless conectados à operação.

ADD SOLUTION + CISCO

Discover where your network loses predictability before choosing the next device

Bring topology, inventory, critical applications and observed symptoms. The discussion organizes hypotheses and measurements to distinguish access, capacity, data path, policy and operational problems.

CONVERSATION CONTEXTYou are contacting Add Solution about Cisco — networking e wireless.
CONVERSA COM ESPECIALISTA

Como podemos evoluir sua infraestrutura de rede com Cisco?

Conte o cenário atual e o resultado esperado. A solicitação será encaminhada aos especialistas adequados.

01
About youHow can we contact you?
* Campos obrigatórios
Your data is sent securely and used only to respond to the request. See our Privacy Policy. · Terms of Use.