It is likely because we will pull the AAEP binding off that port. The AAEP is kind of the meeting port between the port and the VLAN.
Although, depending on the version, we have seen some varied behavior where if you have correct access polices and a static binding for at least one port on a switch the others interfaces on the same switch continue to function without access policies as long they have a static binding present.
I filed (https://bst.cloudapps.cisco.com/bugsearch/bug/CSCve82295/?reffering_site=dumpcr) for this but what is described is apparently expected behavior. In Ebro (3.0(1)) we added a knob which will allow customer to enforce those validations.
Saying this, I recommenced a window to be safe (:
Thank you for participating in the Cisco Support Forum for ACI! If you have other questions related to this post, please let us know. If this response answers your questions, please mark this post "answered" and assign a rating to the response(s) provided. This will help notify other viewers that your question(s) is answered and this helps us provide better responses for this and future questions.
Regards,
