On my classical network I have two switches with connections to 2 sets of HA Pair of firewalls( Palo) The connection is made via a subnet we can data transport, It's just a /24 network. On the switches I have an SVI for data transport and we run ...
Forum Posts
Resolved! 1 L3Out with 2 BGP peer
Hi, Will like to check if I had 1 L3Out but BGP peer to different ISP (A & B). But when advertise route, I only want to advertise all to ISP A instead of ISP B, is this workable? Or I will need to create another L3Out for ISP B? In IOS, we can create...
Greetings, out of curiosity how long does it take your APIC device to boot to the APIC screen?I'm seeing anywhere from 20-30 minutes. Sometimes requiring me to reboot multiple times to get it to appear.Working with C220 M5. More often then not I get ...
Hello, Currently, I am designing ACI objects for ACI. For AAEP I was following best practice, one AAEP for each tenant with different domains for each tenant. In my network, I have about 10 tenants. Some of the physical interfaces are shared between...
I see that licensing is introduced in release 3.2(1l). I also found a following note: "If the APIC is unregistered, the APIC functionality is not affected." Not sure what is the purpose? I'd like to get rid of that annoying alert caused by not licens...
Hi all,After change booting setup (F2) to "Load manufacturing Default values"My APIC can't boot up
Would Mutlisite support Shared L3OUT configured in common tenant in each of the Site? What version of APIC and Multisite support this feature? Thanks.
Is it possible to configure two factor authentication for the APIC? If so can someone provide me a link to the documentation.
Resolved! ACI Standard Contract vs Taboo
Hi, Can someone clear me the below questions regarding Standard contracts and Taboo contracts : 1) As i get tell now that when i create a standard contract filters, i can choose actions at subject for filters (deny or permit)Based on this i can deny...
Hi,we plan to migrate legacy network to ACI,and will have an L2 trunk vpc link from ACI to Legacy.my question :- which is the best practice to configure that L2trunk interface ? Extend EPG or L2out?- do I need to enable spanning-tree bpdu filter on t...
Hi, I am trying to understand how exact ACI DHCP relay works. After reading the ACI DHCP relay technote, I still have questions. So I did the following tests, with dhcp_server in epg-A (tn-A, app-A, ctx-A, BD-A, subnet-[A]), and dhcp_client in ep...
Hello ACI expert, Im trying to use LDAP group map to do RBAC on ACI. The user in AD does authenticate but i am unable to logon to ACI. I see following error message pop up when i logon to ACI using AD username. "Denying authentication as no AD Group ...
I didnt see the links for the ACI 4.2 verified scalability. Where can this be found?
Hello allI would like to know if the SNMP trap sending on link-state is enable or disable by default in ACI.And I would like to know if (and how) it is possible to change the default behavior.(in IOS we have a 'no snmp trap link-status' that we can a...
Hi community,we have a strange behavior at one of our customers' ACI fabrics: This log-message appears in the syslog:%ACLLOG-5-ACLLOG_PKTLOG_DENY: CName: <unknown>(UNKNOWN: 0), VlanType: FD_VLAN, Vlan-Id: 123, SMac: 0x020820a12345, DMac:0xfffff...
