can we use PBR firewall for host communication within same EPG

[hashimwajid1]

Hello

we would like to isolate host communication within same EPG and if host want to communicate with other host inside same EPG than this should be done through PBR firewall.

intra EPG communication should be done through PBR firewall so we can control who can talk to who in same EPG

is it possible to achieve ?

Thanks 

[Sergiu.Daniluk]

Yes, you can achieve this by using intra-epg PBR contract.

Check the PBR whitepaper: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739971.html  , section "PBR with intra-EPG contract"

Take care,

Sergiu

[hashimwajid1]

Dear Sergiu,

Thanks for response. do we have to configure Micro EPG for this task and then apply contract between micro EPG or is there another way to apply it ?

[Sergiu.Daniluk · Accepted solution]

You don't need uEPG for this, just a intra-EPG contract + PBR attached to it.

Have a look at the whitepaper I shared above and you will see the technical details.

Cheers,

Sergiu