Per the documentation (see Transit Routing with a Single L3Out Profile under Guidelines for Transit Routing), with the VRF enforced and without using contracts under the 0.0.0.0/0 subnet I just need to check Import Route Control Subnet and use 0.0.0....
Hi all, Any specific reason why a Port-channel cannot be used as destination for local SPAN configuration on ACI? I need to mirror traffic from a vPC (2x10G) and the only option for local SPAN is to use a single 10G access port as destination. Is...
Hi All, Just wondering if many people out there are using subject and EPG labels within Cisco ACI to enforce policy? They seem like a really neat and powerful idea, however I'm finding that the lack of in-depth documentation combined with the number ...
Hey all, We are currently working on migrate many of our networks, actually placed on 2 N7k, to a Cisco ACI in Network Centric, all the physical conenctions have been migrated and we just need to migrate the SVI. The migration with almost all the V...
Hello, we have to insert Firewalls between some VRFs (intra-Tenants and inter-Tenants VRFs) in a Dual Site ACI environment; to make things easier, the wished design is to use a pair of firewalls, 1 Fiewall per DC, 1 active and 1 standby, with the nee...
I am reading documentation of Nexus 9000 Series NX-OS(https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/9-x/command_references/921/show/b_N9K_Show_Commands_921.html) I tried several "show" commands and none of them is working. ...
I have a APIC-SIM VM running on top of VMware. I am trying to figure out if I can use a newer APIC-SIM ISO image to perform an upgrade... I tried with to upload the image from my laptop directly on APIC GUI and I also tried to make APIC controller ...
Dear all I am looking at a migration into an Application Centric design. I have a number of VM's to migrate that have multiple processes exposing multiple IP addresses. Example are: Servers with multiple websites on different IP addressesLoad balanc...
Suppose I have a complain that virtual server is not reachable. I know that the server is in ACI fabric environment and I have server's IP address and/or hostname. How can I find which leaf switchport the server is attached to? I see there is a searc...
Hi board, Quick question: I'm currently evaluation ACI (latest 3.x release) and I'm wondering what's the difference (and best practice) for endpoint loop protection vs. rogue endpoint control policy. As far as I understood the whole thing, the rogue ...
Hello Community, with the Nexus 9000 series (NX-OS), VLANs are reserved internally, which cannot be configured in this way. Here is the overview from the official source: 3968-4095 | Internally allocated | These reserved VLANs are allocated for i...
I am googling around trying to find out how to check physical interface status of a switch in ACI environment via CLI. If I ssh to a leaf switch and issue "show interface x/y" I get the following: URL: http://127.0.0.1:7777/api//class/nwIf.xml?&targe...
Here is what I'm trying to do:- create a snapshot for All Fabric on a production ACI system- export a snapshot (simply scp proper *.gz file from /data2/snapshots)- import snapshot file on a lab system (APIC used for testing)- while trying to rollback...
Dear Community,i read about new Feature IntraEPG Contract. I'm trying to understand that right now because we have a requirement that goes in that direction. We have the following scenario:In an EPG we want to isolate EndPoint from each other so that...
Hi Community, I try to upgrade an ACI Frabic in our Lab from 3.2(1m) to 3.2(3i) and I am wondering that the catalog file for 3.2(3i) does not appear after uplodaing an processing the files to the fabric. The files are MD5 checked. Do you have any...
