ACI Microsegmentation

[Ziad El Achkouty]

Hello,

Could microsegmentation be achieved if the default gateway is not on the ACI?

Moreover, could it be achieved if the default gateway is on ACI and the bridge domain is in flood mode and not arp proxy?

[Martin.Falberg]

Hi,

I believe the answere is no since you want to use contracts between you epgs and for u to do so correctly the IP needs to be able to be redistributed within the fabric. And by having the L3 outside this is not viable I believe.

I dont see any reason why this shouldn't work. But test it out and you would find out rather quick.

GL

Martin