cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Community Helping Community

347
Views
5
Helpful
2
Replies
Beginner

ACI Standard Contract vs Taboo

Hi, 

 

Can someone clear me the below questions regarding Standard contracts and Taboo contracts :

 

1) As i get tell now that when i create a standard contract filters, i can choose actions at subject for filters (deny or permit)

Based on this i can deny a few type of traffic , then allow the rest (permit any any)

*So why i would need  to use Taboo contract?

 

2) Do i have to apply Taboo contract to two EPGs or just one, and how it work?

 

Thanks,

1 ACCEPTED SOLUTION

Accepted Solutions
Rising star

Re: ACI Standard Contract vs Taboo

Hi @Wessam-88 ,

Here is my advice.

Forget Taboo conracts exist, and never use them.  Also avoid using deny filters if possible.

Taboo filters don't work "between" EPGs, but are applied to an etire EPG.

So if you wnated to prevent an EPG from ever using cleartext communications, you could apply a taboo contract with filters for port 80 and 23 say.

But don't do that. Do it right the first time.

I hope this helps

 



Don't forget to mark answers as correct if it solves your problem. This helps others find the correct answer if they search for the same problem


RedNectar
aka Chris Welsh


Don't forget to mark answers as correct if it solves your problem. This helps others find the correct answer if they search for the same problem

View solution in original post

2 REPLIES 2
Beginner

Re: ACI Standard Contract vs Taboo

Hi @RedNectar , Thanks for help

Rising star

Re: ACI Standard Contract vs Taboo

Hi @Wessam-88 ,

Here is my advice.

Forget Taboo conracts exist, and never use them.  Also avoid using deny filters if possible.

Taboo filters don't work "between" EPGs, but are applied to an etire EPG.

So if you wnated to prevent an EPG from ever using cleartext communications, you could apply a taboo contract with filters for port 80 and 23 say.

But don't do that. Do it right the first time.

I hope this helps

 



Don't forget to mark answers as correct if it solves your problem. This helps others find the correct answer if they search for the same problem


RedNectar
aka Chris Welsh


Don't forget to mark answers as correct if it solves your problem. This helps others find the correct answer if they search for the same problem

View solution in original post

CreatePlease to create content
Content for Community-Ad
FusionCharts will render here