Microsegmentation on Physical Domain EPG

[Networker0]

Hello Team,

I'm trying to configure Microsegmentation for physical Domain EPG (IP attribute, which is supported according to doc), but, it's not working as expected.

note: leaf is 2nd gen (-EX model)

Any idea, please.

Thanks

[Sergiu.Daniluk]

Can you detail more what is not working as expected?

[Networker0]

Hello Sergiu,

Thanks for your reply,

I mean it's not working at all. The endpoint isn't classified according to attribute IP and didn't join the uEPG.

(i tried the same thing with VMM, and it's working, but not with physical domain EPG)

Br.

[Sergiu.Daniluk]

Hi @Networker0 

We need more detail to understand your setup and the problem you are facing:

- is your BD L2/L3?

- is the endpoint detected in EPG in the first place?

- do you have any faults generated?

- if you use mac attribute, is the EP correctly classified in the appropriate uEPG?

Cheers,

Sergiu

[Networker0]

Hi,

- it's L3 BD, gateway resides in ACI (unicast routing enabled).

- Yes, the endpoint is detected in the base EPG.

- No faults generated in base or uEPG.

- No, even when selecting the MAC attribute and putting a MAC of a learned endpoint, it doesn't move to the uEPG.

Thanks.

[Sergiu.Daniluk]

Here are all the requirements and considerations for PhyDoms:

+ Base EPG must be configured and deployed to program VLANs on leaf host ports
+ Base EPG & IP uEPG must associate with same BD and the BD MUST have an IP subnet configured
+ IP uEPG must be deployed an all the nodes where the BD is deployed by using node attachment
+ Deployment Immediacy must be “Immediate”
+ You can specify individual IP addresses and/or subnets (i.e. 10.10.10.1, 10.10.10.0/24)

Can you verify that all requirements are meet?

Cheers,

Sergiu