Micro-segmentation requirements

[roysm]

Hi

I'm trying set up micro-segmentation and going through the ACI virtualizaton guide https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/virtualization/b_ACI_Virtualization_Guide_2_3_1/b_ACI_Virtualization_Guide_2_3_1_chapter_0100.html

This document says that uSeg using VSphere VDS is not support on the Nexus 9372TX or 8372PX switches. Can anyone confirm if this is correct? And also why? What are the limitations on these switches that prevents us from setting up uSeg using these switches?

This is a little annoying as nobody mentioned that they were not fully compatible when we purchased the switches. 

Thanks

Roy

[micgarc2]

Hi Roy,

That is correct. It is just a hardware limitation. Microsegmentation is supported in the -EX hardware. Let me know if this helps... Sorry for your frustration. I can try to follow up to see if this will ever be supported but from my understanding it is more specific to the GEN2 ASICs in the -EX switches that provide this capability. 

Thank you for participating in the Cisco Support Forum for ACI! If you have other questions related to this post, please let us know. If this response answers your questions, please mark this post "answered" and assign a rating to the response(s) provided. This will help notify other viewers that your question(s) is answered and this helps us provide better responses for this and future questions.

Regards,

Michael G.

[Beau Poehls]

Another option that might would be the use of the Cisco AVS or the replacement for the Cisco AVS, which should be coming out soon. The AVS can be deployed as a replacement for the VMware DVS in VXLAN Mode, which would allow you µSeg capabilities, without having Generation 2 hardware.