Hi All,
I'm currently designing an ACI solution for a single customer that wants to use multiple tenants for different business functions (prod, dmz, dev etc) whilst using the same physical infrastructure. For ACI, I typically configure separate VLAN Pools, Physical/L3 Domains and AAEPs per tenant as each tenant has their own infrastructure, however in this instance the infrastructure is shared so I'm thinking that a single AAEP will be sufficient whilst keeping dedicated VLAN pools and domains. For example
Tenant: EntProd
VLAN Pool: EntProd_VLANs
Physical Domain: EntProd_PDOM
L3 Domain:EntProd_L3DOM
Tenant: EntDev
VLAN Pool: EntDev_VLANs
Physical Domain: EntDev_PDOM
L3 Domain: EntDev_L3DOM
I will then create a single AAEP named Ent_AAEP that is associated to the required interface policy groups and to the following domains
EntProd_PDOM
EntProd_L3DOM
EntDev_PDOM
EntDev_L3DOM
Based on this the single AAEP will be associated to multiple physical and l3 domains. If the customer had 10 tenants, this design would equal 20 domains associated to the AAEP. Is this an acceptable approach?
