ACI Micro-segmentation

[SIMMN]

Inside EPG configuration, there is Intra-EPG isolation. I was told this is for VMs only. Is it true?

There is also micro-EPG which pretty much has the same configuration setting options as the normal EPG.

So the question is what is ACI Micro-segmentation? Both above together OR either? Should micro-EPG be used the same way as the normal EPG, since they have the similar configuration settings?

Also how does Micro-segmentation work if a physical endpoint is connected to an intermediate device which connects to Leaf?

Thanks,

/S

[Robert Burns]

uSeg (MicroSeg) applies to baremetal as well as VMs.  Same with IntraEPG Isolation.

Most of this is explained in the Virtualization Guide:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/3-x/virtualization/b_ACI_Virtualization_Guide_3_1_1/b_ACI_Virtualization_Guide_3_1_1_chapter_0100.html

and in this video (based on virtual useg implementation w/ VMware vDS):

https://www.youtube.com/watch?v=CAVy_82njmw

Regards,

Robert

[SIMMN]

Will read that chapter as soon as I can. I am mainly trying to figure out how micro-segmentation work for bare metal not directly connected to leaf...

[Robert Burns]

That would be IP-based EPG classification. 

Robert