Thanks for all stuff, it's very useful. I would have a question about to the two workflows I've tested for deploying my Fabric at edge, "Onboard VSP" and "Onboard Mgmt VLAN". Normal approach for me is to change Mgmt VLAN first, then Onboard VSP. But I use auto-sense isis authentication to secure access to the Fabric, and in this case, changing mgmt vlan 4048 to an another one will failed because adjacencies are not yet up and new mgmt vlan is not reachable.
Are you agree with my reasonnment ? Is modifiying "Onboard Mgmt VLAN" for integrating isis authentication mecanism the only solution ?