Translating Nexus OS ACL to ACI Contracts

[Chella]

Hi,

We have migrated the legacy DC network to  Cisco ACI in Network Centric approach. I have mapped every VLAN to One BD and one EPG. Leagcy  DC has few Access Lists configured on VLAN SVIs to restrict the communication between Different VLANs. Currently i have configured one contract to permit all traffic between EPGs. Now I have two EPGs where i need to restrict the communication using IP  address.

In current Setup, no VMM integration done and all end devices are simple physical domains.  

Could anybody suggest how can i implement the  same ACLs between EPGs  on ACI infra.

[Tomas de Leon]

You may want to take a look at the following links:

http://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI-Fundamentals_chapter_010001.html#concept_9241D40AD01249C0992D486359CF4667

Principles of Application Centric Infrastructure
http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps13004/ps13460/white-paper-c11-729906_ns1261_Networking_Solutions_White_Paper.html

Use vzAny to Automatically Apply Communication Rules to all EPGs in a Context
http://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/b_KB_Use_vzAny_to_AutomaticallyApplyCommunicationRules_toEPGs.html

Learning ACI – Part 4: Application Profiles, EPGs, Contracts and Filters
https://adamraffe.com/2015/01/02/learning-aci-part-4-application-profiles-epgs-contracts-and-filters/

Policies and Contracts
http://aci-troubleshooting-book.readthedocs.io/en/latest/pol_cntr.html

Cisco ACI – Creating Contracts
http://www.virtualizationadmin.com/articles-tutorials/general-virtualization-articles/cisco-aci-creating-contracts.html