Before I add an out-of-band management contract to ACI to allow SNMP to APIC's, I want to confirm whether the default contract is a permit any/any? I don't want to add contracts and then break management access to fabric. default out-of-band con...
Hi, looking more info about of choice ACI APIC appliance... APIC Appliance – For Medium Configuration (Up to 1000 Edge Ports) APIC Appliance – For Large Configurations (More than 1000 Edge Ports) What in this case is meant by "Edge Ports"? ... leaf p...
Hello Guys, I don't find any documents from Cisco where it shows how can customers migrate from OTV technology for L2 stretched network to ACI? I only saw a diagram in Cisco IT design page 13 "attached" but no configurations and no guidelines about...
I have a weird issue with the BGP session between ACI leaf and one external ASR. I successfully configured an external routed network with eBGP peering, then I created an EPG with the bridge domain attached to the L3-out and with the subnet advertise...
I followed the configuration guide to configure BFD but it isn't seem to be working. I have a eBGP peer directly connected off a physical interface on a leaf node. The peering and everything is working, and I am just trying to add BFD to this peering...
Hello, I am currently working on ACI to an ASA context (Firepower) integration and encountered an interesting problem. So, the connection between ASA and ACI leaf nodes are VPC. Pings work fine from the ASA to ACI L3out VPC A/B primary and secondar...
Hi All, I have some questions as below 1. Can the spine and leaf configure OOB interface by using console access to the box itself but not discovered by APIC and then configured from APIC ? 2. If yes, please send me the related document as I can't...
Hello, i want my ACI Fabric (2.0(1l) be a NTP server for all my DC ressources (servers, VMs, LB, etc..) ACI Fabric itself will get its clock from a stratum 4 server (in fact my CE routers). Could ACI act as a stratum 5 in regards of my DC ressources?...
Is there any way to set the SSH timeouts for the APIC, LEAF, and SPINE devices? I can't seem to find the commands in the GUI or the CLI... Also, the default logon attempt max is set to 5 is there any way to configure max logon attempts to 3?
We've configured the VMM Domain, AEP and installed the AVE but it fails to obtain a TEP address even though everything appears to be configured correctly? cisco-ave:~$ ip address show dev kni05: kni0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdis...
Hi All, Note that i've previously posted this question to the Application Networking sub-forum using a different account, however I haven't received any replies so I thought I'd repost it here. My ACI multipod deployment consists of two pods, wit...
Dear All , We have configured Two L3OUT for Firewall Internal and External Network using different VRF in ACI .In addition , We have configure EPG-External and EPG-Internal for EAST-WEST traffic flow .We have configured two bridge domain for EPG-E...
I am trying to create a route map/profile that will do a set when it matches a prefix and then pass it along to the next match and possibly do a set again. Is this possible in ACI?
Hi, I have two N7k switches connected to Border leafs using 4*10G links, the connectivity as follows: 1. N7K-1 connected to BL-1 and BL-2 2. N7K-2 connected to Bl-1 and BL-2. what is the best way to configure l3out between N7K and BL using vPC or...
Hello guys, I am having this problem: When I tried to jump from 1 of my APIC to switches located on Pod 2 in a multipod deployment I can't connect to them via ssh. APIC3#ssh SPINE-2201 ssh: connect to host spine-2201 port 22: No route to host ...
