Hello ACI people, I came across interesting scenario. I need to create Transit Routing between two different L3Outs, L3Out-A and L3Out-B, they are in different VRFs, VRF-A and VRF-B under one Tenant. L3Out-A is using OSPF and L3Out-B is just a static...
We have one VRF with Vzany, we have configured two devices as a cluster Fortigate Two Arm with PBR source and destination, then we configured two bridge domains and concrete interfaces, service graph routed mode, and we have created two Contracts at...
Our SAML certificate is about to expire and would like to understand the process for the AD side of the house. I know that I have to login to the PCCE IDS and regenerate the SAML Certificate.After that I can download the Metadata file, and it comes ...
Hi communityI have some doubts with these concepts and demostration.I was reading the OCG chapter 8 and the part where speak about types of VlanI know in ACI you configure Vlan pool range for Domain, AAEP (clear for me)Then I know the normal VXLAN yo...
Currently redesigning my DC, need to terminate 2* internet links to one border leaf and another 4 MPLS links to another boder leaf, in order to get benefit for L4L7 service insertion (PBR) of ACI for east west and nrth south traffic using 2 cluster F...
Hello Cisco Community,Secure and controlled access is fundamental to any network, and in Cisco ACI, that foundation is built upon Access Policies.I'm excited to share my latest blog post, "Understanding Cisco ACI Access Policies: A Practical Guide."T...
What is a DCN License for Cisco ACI to using Health Score and Troubleshooting Wizard Feature ?
Hi,I build Cisco ACI using terraform with CI\CD, having only one tenant and one vrf. Since my prod environment is big with thousands of variables, I end up having very big state file and huge delay (7-8 minutes) when running the pipeline.I found that...
Hello, Can someone explain to me what are doing those 3 technologies ? Thanks
Want to replace a faulty N9K-C9336PQ with a spare unit and the current ACI fabric is running aci-n9000-dk9.11.1.3f.bin, but the spare switch is on aci-n9000-dk9.11.0.4g.bin.Just to confirm:Will the APIC automatically upgrade the new switch to 11.1.3f...
Hi all,I have to update Apic from 4.2 to a newer release. According to the Cisco download site the two recommended releases are:- Release 6.0(7e) M- Release 5.3(2c)The first one requirest 2 jumps to go from 4.2 to 6.0(7e), while the second can be dir...
Hi communityI'm studying about the certification 300-620 ACI exam and topics.I got some terms and concepts about 3 different IPs and I got confused, they are: Infraestructure VLAN- IP VLAN, PTEP IP and FTEP IP, they are 3 differents IPs, my questiosn...
We utilize ISE for authentication to our ACI environment and have enabled accounting as well for audit logging. When I run the TACACS Command Accounting I see the changes but there is no command arguments as I see on other devices such as switches/r...
Hi, We are deploying an Openstack cluster using kolla-ansible, which rely on docker containers. I'm trying to build and run ACI containers but it's a bit painfull ! Is someone here have some experience with integrating ACI with kolla deployment ?...
Hi,we're having issues with AAA in ACI. We configured LDAP authentication using these references:https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/application-policy-infrastructure-controller-apic/221812-configure-aci-ldap-authentic...
