Intra EPG Isolation configuration

[Torsten_Graf]

Hello Community,

I'm trying to configure private VLAN / Intra EPG isolation in my ACI/VMM environment, but I'm little unsure if i have configured everything correct.

My steps:
1. EPG/VLAN (for the VMs which should be isolated) - Activated Intra EPG Isolation in the EPG
2. Isolated EPG/VLAN
3. In my VMM Domain I configured my EPG/VLAN vor VMs as Primary VLAN and my Isolated EPG/VLAN as Port Encap

- Is this correct the correct way?
- Do I need an Isolated EPG/VLAN for every new Intra EPG Isolation, or can I use my Isolated EPG/VLAN for many Intra EPG Isolation constructs?

Thanks
Torsten

[Ezzedine · Accepted solution]

Hello @Torsten_Graf 
yes you need a new EPG for ever new Isolated EPG, please consider the GW .
here is documentation about Intra-EPG Isolation Enforcement and Cisco ACI 
hopefully that is useful please don't hesitate to ask further if you still have a question.

best regards
Ezzedine

[Torsten_Graf]

@Ezzedine- Thanks for this information. I will have a closer look to the documentation to get the right configuration.