Cisco ACI L3-Out Contract | Micro-segmentation

[vikrammurudkar7589]

Hi All,

I'm going to start Cisco ACI Implementation so I require some help w.r.t contracts, filters, Micro-segmentation, L3-Out

I want to create a contract in Cisco ACI with source IP & destination IP for filtering of some services based on below scenario. Consider a below example:

VM-1: 192.168.1.2/24

VM-2: 192.168.2.2/24

VM-3: 192.168.3.2/24

VM-4: 192.168.4.2/24

Scenario-1: VM-1 & VM-2 are using services - PING, TCP - 80,443 in between them.

Scenario-2: VM-3 & VM-4 are using services - PING, TCP - 80,443 in between them.

Scenario-3: VM-1 & VM-3 are using services - PING & 443.

Scenario-4: VM-2 & VM-4 are using services - 80 & 443.

How can I create contracts between them for the above scenarios?

Can anyone guide me on the above scenarios?

Regards,

Vikram Murudkar

[AshSe]

Hi @vikrammurudkar7589 

Before giving you the solution; could you please explain the logical topology in terms of Tenant, VRF, BD, AP, and EPG setup. Hope you know that contracts is/are required for Inter-EPG communication thus is the question.

BR,

AshSe