Hello,
I am trying to configure the Access Policies, and I am trying to do it by the Interface Configuration wizard. However, when I create the AAEP, I can`t create new Physical Domains. There is only this "phys" domain. Why does it say for me to select a Domain if I can`t create one without going outside the Wizard? If I can`t create new Domains, I can`t associate VLANs Pools. Is this wizard incomplete?
As you can see, there is no way to create a Domain. And there is only this "phys" domain. Is it supposed to all the interface be put in this "phys" Domain with no VLAN Pool?
I am failing to see the purpose of the Interface Configuration wizard if I can`t assign VLAN Pools.
Accepted Solutions
Hi @BertiniB ,
I see your point. I strongly suggest you hit the Feedback icon and report this deficiency
BUT...
On the other hand I'd suggest that it is good practice to have your VLAN Pools, Domains and AAEP (often one AAEP is enough) all created BEFORE you start assigning interfaces - the reason being that creating VLAN Pools, Domains and AAEP is something you do VERY occasionally, possibly only once in the lifetime of an ACI deployment, whereas assigning interfaces and creating Interface Policy Groups is part of day-to-day ongoing maintenance.
It MIGHT be Cisco's intention to make it difficult to create the entire Access Policy Chain using the Interface Configuration Wizard just so end users don't go creating lots of AAEPs and Domains that are going to cause nightmares (most likely overlapping VLAN pools) later in life - although if that was the intention, it would have been a good idea to force the creation of an AAEP before reaching the dead-end that you found.
You may gain some insight into the way the ACI "Access Policy Chain" works by googling that term, although most of the articles you find will relate to ACI before the Interface Configuration Wizard was available.
As a side-note, if you also create your Interface Policy Group (Fabric > Access Policies >> Interfaces > Leaf Interfaces > Policy Groups > [Leaf Access Port | PC Interface | VPC Interface] ) before using the Wizard, you can actually complete the rest of the Access Policy Chain from that point. (i.e. create an AAEP, and while creating the AAEP, create a Physical Domain, and while creating a Physical Domain, create a VLAN Pool)
