As we mentioned earlier, ACI fabric provides tenants with default gateway functionality to route traffic between the ACI fabric VXLAN networks. The ACI does this at the ingress interface of the first leaf switch connected to the endpoint. All of the ingress interfaces across the fabric share the same router IP address and MAC address…
Read More “ACI Intersubnet Tenant Traffic – Cisco CCNP and CCIE” »
The management profile includes the out-of-band EPG MO that provides access to management functions via the out-of-band contract (vzOOBBrCP). The vzOOBBrCP enables the external management instance profile (mgmtExtInstP) EPG to consume the out-of-band EPG. This exposes the fabric node supervisor ports to locally or remotely connected devices, according to the preference of the service provider….
Read More “Out-of-Band Management Access – Cisco CCNP and CCIE” »
Labels, subjects, aliases, and filters enable mixing and matching among EPGs and contracts to satisfy various applications or service delivery requirements. Contracts can contain multiple communication rules, and multiple EPGs can both consume and provide multiple contracts. Labels control which rules apply when communicating between a specific pair of EPGs. A policy designer can compactly…
vzAny managed objects provide a convenient way of associating all endpoint groups in a Virtual Routing and Forwarding (VRF) instance to one or more contracts (vzBrCP) instead of creating a separate contract relation for each EPG. vzAny automates the process of configuring EPG contract relationships. Whenever a new EPG is added to a VRF, vzAny…
The ACI fabric provides multiple attachment points that connect through leaf ports to various external entities such as bare-metal servers, virtual machine hypervisors, Layer 2 switches (for example, the Cisco UCS fabric interconnect), or Layer 3 routers (for example, Cisco Nexus 7000 Series switches). These attachment points can be physical ports, FEX ports, port channels,…
Read More “Attachable Entity Profile – Cisco CCNP and CCIE” »
The APIC integrates with a VMware vCenter instance seamlessly to extend the ACI policy framework to vSphere workloads. The APIC uses Application Profiles to represent the ACI policy. The Application Profiles model is the logical representation of all components of the application and its interdependencies on the ACI fabric. This policy framework also includes an…
Read More “Cisco ACI Integration with VMware vCenter – Cisco CCNP and CCIE” »
Endpoint groups are used to create a logical group of hosts or servers that perform similar functions within the fabric and that share similar policies. Each EPG created can have a unique monitoring policy or QoS policy and is associated with a bridge domain. An EPG is a child object of the application profile, and…
A bridge domain (fvBD) is the logical representation of a Layer 2 forwarding domain within the fabric. A bridge domain is a child of the tenant object and must be linked to a VRF. The bridge domain defines the unique Layer 2 MAC address space and a Layer 2 flood domain if flooding is enabled….
Read More “Bridge Domain and Subnets – Cisco CCNP and CCIE” »
Tenants (fvTenant) are top-level objects that identify and separate administrative control, network/failure domains, and application policies. A tenant’s sublevel objects can be grouped into two basic categories: tenant networking and tenant policy. The decision on how to leverage tenancy models is driven by a number of factors: 1. Overall IT operations and support models in…
Cisco Nexus Dashboard Orchestrator (NDO) provides consistent network and policy orchestration, scalability, and disaster recovery across multiple data centers through a single pane of glass while allowing the data center to go wherever the data is. NDO allows you to interconnect separate Cisco Application Centric Infrastructure (Cisco ACI) sites, Cisco Cloud ACI sites, and Cisco…
