Hello Friends,
We have Cisco ACI data center with multi-tenancy.
For a specific tenant...which is configured with few VRFs and external dedicated firewalls and approx 250 EPGs and no contracts between EPGs all communication is going to manage at external firewall. Setup is now planned for revamp and optimization with micro and macro segmentation to achieve advanced security level.
initially, We were thinking to apply contracts between EPGs by count of EPG is huge so probably would be tough to manage further and would not be a recommended solution (as per us).
Since we are not pretty old with ACI or an expert , requesting here to please suggest solution and deployment model to achieve the needful with micro and macro segmentation smartly without much changes or service downtime.
Rgds
***
