Cisco ACI CCI Usage (Consumed Contract Interface)

[moj_ccie]

Hello community users

I've been using ACI Fabric in our SD-DC in Network Centric model ;

In my migration plan and proposed design, I've faced some practical concept such as "Consumed Contract Interface";

If my contract provider is in another tenant, should I use this and how ?

Thanks - Mojtaba

[AshSe · Accepted solution]

Yes, if your contract provider is in another tenant (Inter-Tenant), you should use the "Consumed Contract Interface" (CCI) to facilitate the communication between tenants in Cisco ACI. The CCI allows an EPG (Endpoint Group) in one tenant to consume a contract provided by an EPG in another tenant. Here’s how you can set it up:

Steps to Use Consumed Contract Interface (CCI)

1. Create the Contract in the Provider Tenant:

• Log in to the APIC GUI:
  • Open your web browser and log in to the APIC GUI using your admin credentials.
• Navigate to the Provider Tenant:
  • Go to Tenants and select the tenant that will provide the contract.
• Create the Contract:
  • Under the selected tenant, navigate to Policies > Contracts.
  • Click on the + (Add) button to create a new contract.
  • Define the contract name and the filters (e.g., protocols, ports) that specify the allowed traffic.
  • Make sure to keep the Scope of the contract as Global
• Assign the Contract to the Provider EPG:
  • Navigate to Application Profiles > Application EPGs.
  • Select the EPG that will provide the contract.
  • Under the Provided Contracts tab, click + to add the newly created contract.
• Assign the Gateway to the EPG:
  • Navigate to Application Profiles > Application EPGs.
  • Select the EPG that will provide the contract.
  • Create the EPG Subnet

2. Export the Contract to the Consumer Tenant:

• Navigate to the Provider Tenant:
  • Go to Tenants and select the tenant that provides the contract.
• Export the Contract:
  • Navigate to Policies > Contracts.
  • Select the contract you created.
  • Click on Actions > Export Contract.
  • Choose the target tenant (the consumer tenant) and export the contract.

3. Consume the Contract in the Consumer EPG:

• Navigate to the Consumer Tenant:
  • Go to Tenants and select the tenant that will consume the contract.
• Assign the Contract to the Consumer EPG:
  • Navigate to Application Profiles > Application EPGs.
  • Select the EPG that will consume the contract.
  • Under the Consumed Contracts tab, click + to add the imported contract.

Example Scenario:

1. Provider Tenant: Tenant_A

• Provider EPG: EPG_A
• Contract: Contract_A

2. Consumer Tenant: Tenant_B

• Consumer EPG: EPG_B

Summary:

1. Create Contract_A in Tenant_A and assign it to EPG_A as a provided contract.
2. Export Contract_A from Tenant_A to Tenant_B.
3. Check Imported Contract_A into Tenant_B.
4. Assign Contract_A to EPG_B as a consumed contract.

By following these steps, you can successfully use the Consumed Contract Interface to allow an EPG in one tenant to consume a contract provided by an EPG in another tenant, facilitating inter-tenant communication in Cisco ACI.

AshSe

Please rate this post if it was helpful; your feedback is appreciated!