cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
883
Views
0
Helpful
2
Replies
CSCO12550173
Beginner

aci microsegmentation without vmware integration

Hi experts,

i have a doubt about useg

if you have only one interface connected to a vcenter-esxi host and its a VDS to a leaf device

and you want to enable useg with a physical dom, because there is no a vm integration only with ip address or mac

 

because i searched and the only think is mention is when this integration is on

but no no info when this is off and you only have trunks interface from the vcenter to the leaves

 

 

 

 

 

1 ACCEPTED SOLUTION

Accepted Solutions
Sergiu.Daniluk
VIP Advocate

Hi @CSCO12550173 

If there is no integration with VMware vCenter, and you are using plan vlans on your VDS, then the uSeg will only take effect on the routed traffic. This is because the switched traffic in the same vlan (port-group) will be locally switched by the VDS.

However, you can use isolated vlans on your VDS. This way all traffic can basically be forwarded to ACI Leaf, and the traffic can be policy enforced.

Note: you will need to configure both MAC and IP as attributes for your uSeg - MAC for switched traffic segmentation and IP for routed traffic.

 

Stay safe,

Sergiu

View solution in original post

2 REPLIES 2
Sergiu.Daniluk
VIP Advocate

Hi @CSCO12550173 

If there is no integration with VMware vCenter, and you are using plan vlans on your VDS, then the uSeg will only take effect on the routed traffic. This is because the switched traffic in the same vlan (port-group) will be locally switched by the VDS.

However, you can use isolated vlans on your VDS. This way all traffic can basically be forwarded to ACI Leaf, and the traffic can be policy enforced.

Note: you will need to configure both MAC and IP as attributes for your uSeg - MAC for switched traffic segmentation and IP for routed traffic.

 

Stay safe,

Sergiu

View solution in original post

Hi Sergiu, hope you are doing fine

thanks for the response i ll test it in a lab environment to see all the phases that the clients need it

thanks for your reply