cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
923
Views
5
Helpful
3
Replies

cisco aci microsegmentation

PTA90
Level 1
Level 1

 

Hi all, i have:

EPG-10 (10.10.10.2, 10.10.10.3 ) link BD-10 (gateway 10.10.10.1/24)

EPG-20 (10.10.20.2, 10.10.20.3 ) link BD-20 (gateway 10.10.20.1/24)

i not intergrate VMM domain in ACI and i want create useg EPG (10.10.10.3, 10.10.20.2). can i do it? and useg EPG links to which BD?

Capture.PNG

 

3 Replies 3

Sergiu.Daniluk
VIP Alumni
VIP Alumni

Hi @PTA90 

What you described there, you cannot achieve because the base EPG and the uEPG must be associated to the same BD.

Since you have 2x BDs, this is not possible with uEPG..

However, you can configure an ESG (Endpoint Segment Group) to achieve what you want:

esg2.jpg

 

You can find more details about this in the ESG config guide:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/5-x/security/cisco-apic-security-configuration-guide-50x/m-endpoint-security-groups.html 

 

Note: this feature is supported starting with ACI 5.0

 

Stay safe,

Sergiu

Thank msdaniluk,

i can create new BD with 2 subnet of BD-10 and BD-20 and Useg EPG link to this new BD ?

Can i do it?

Capture1.PNG

Yes this is possible.

 

Sergiu

Save 25% on Day-2 Operations Add-On License