we have a problem related to contracts that all epgs directed to firewall with PBR and vzany under vrf and there is some epgs with some specific ports under contracts we noticed that some of epgs that must be directed to firewall hit with the specifi...
Forum Posts
I had a customer ask me this today, and I wasn't sure how to answer. The only designs I've personally seen are ACI Spines connecting to the IPN/ISN for Multi-Site.If you have a supported platform, say Nexus 93600CD-GX, can this connect northbound to ...
hello, we are planning to user either ansible or terraform for our existing ACI platform. the platform uses around 300 switches and 1500 EPGs. taking into account that it is brownfieldwhich tool do you think is best for such an environment (1500 EPGs...
Resolved! USBメモリの暗号化について
ACIの機器が故障しサポートに相談した際に、USBメモリからの起動を指示されることがありますその際にACIイメージをダウンロードするUSBメモリについて、認証機能と暗号化機能を搭載していても使用可能でしょうか？
Hi CommunityI need to export a few contracts from ACI, but am struggling to find an easy way to do this. I want to end up with a table that shows header columns such as:App Profile EPGS Contract name Provide/Consume From EPG To EPG Filter ...
I have installed the 5.2-1g version of the simulator as a VM using VShpere 6.7 (There is no access to the management IP address. The VM shows as being isolated. Cannot ping it or http.I cannot ping the gateway. Cannot login as root. Also discovery of...
Good day, community. We do not use SAML at our ACI but still like to renew the expired SAML cert for the sake of cleaning this fault, I am having trouble to find the document to explain how to renew SAML cert on APIC. Does any one know? Thanks. cert-...
We have a multicast source on ACI, the client is reachable via L3OUT.. To make it fonctionnal we have to configure "IGMP Context SSM Translate Policy! Is that normal? the client runs IGMPv3 which is enabled by default on ACI.. Here the cisco doc..Any...
Hi, we have two EPGs , now need to create contract for the communication between them. I just want to want to use two different contracts only. Can I create two contracts like below:contract A -- allow EPG A to access EPG B, then apply this contract...
Short version: In general, what's the best way to advertise an anycast address to ACI from multiple independent/geo-redundant platforms? For multi-pod ACI, is the only option to stretch a single L3Out across all pods and systems, since the anycast ad...
Hi , I noticed IP rogue on ACI environment , and when I checked the history of faults , seems that same IP I learn once from correct interface Eth1/69 node LEAF1 and second time I learn it from Tunnel54 on Leaf2 which is already a VXLAN toward LEAF1!...
Resolved! ACI EPG static mapping
Hello,I have an external switch connected to a leaf switch using a port channel. The port channel carried Vlan 100,200,300. I have EPGs 100,200 and 300 and tried statically mapping the port channel to each EPG, but is fails saying the port channel al...
Hi, I want to use the following command to find out the bridge domain name based on end point IP address, but encounter the syntax error. show tenant MyTenant ip interface bridge-domain | include 10.0.1.1 Don't know how to use the option "include". T...
Resolved! ACI APIC lab replace apic controller
Hi,We have a LAB running with 1 APIC controller (L3). We want to replace the controller with .a L4 controller.Is it possible to change the cluster size to 3, add the new controller, wait for the replication and then decommision the L3 controller and ...
Resolved! Inter-Fabric Messaging (IFM)
Hi community, ACI fabric uses SSL certificate to establish SSL session between APIC and Leafs/Spines. But these SSL certificates have an expiration date. I'm going to change fabrick-security-mode from strict to permissive, in order to switches can c...
