Security parameters for portgroups for VMM DVS integrations

[rajesh315]

Hello There,

I understand Cisco APIC manages the following security parameters (Allow Promiscuous, Forget Transmits and MAC changes) for ACI managed DVS EPG/Port-groups pushed to VMware vCenter Servers but what happens if someone changes one of the security settings from "Reject" to "Accept" directly from vCenter Server to implement a use case? Will Cisco APIC monitors this and revert the changes made by the vCenter user or it just raises the fault in APIC and doesnt override the changes made?

Let me know if the question is not clear here. Thanks.

[Robert Burns]

When a change is done locally on the vDS/Port Group, the APIC will raise an "out of sync" type of fault.  Next time configuration is changed on APIC, it will re-push back the APIC's desired configuration.  Until you make any changes on APIC/VMM, the local vDS change will remain in effect.

Robert