cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1140
Views
0
Helpful
1
Replies

Taboo contract and VRF enforcement configuration

meiravanidjar
Level 1
Level 1

Hi,

I have applied Taboo contract on EPG  in order deny specific traffic.

and also changed the Policy control enforcement preference of the VRF associated with the EPG to Unenforced

The actual behavior is that the specific traffic is allowed(by the VRF enforcement configuration) and is not blocked by the taboo.

show zonning rule also does not show the taboo rule.

This is the correct behavior?

vrf_enforcement.JPG

1 Reply 1

RedNectar
VIP Alumni
VIP Alumni

Hi @meiravanidjar ,

Firslty, I'll answer your question:


This is the correct behavior?


The answer is YES

Once you choose Unenforced for policy control, contracts are bypassed. End of story really.

I hope this helps.


Don't forget to mark answers as correct if it solves your problem. This helps others find the correct answer if they search for the same problem


 

RedNectar aka Chris Welsh.
Forum Tips: 1. Paste images inline - don't attach. 2. Always mark helpful and correct answers, it helps others find what they need.

Review Cisco Networking for a $25 gift card

Save 25% on Day-2 Operations Add-On License