02-26-2018 11:48 AM - edited 03-01-2019 05:27 AM
Basically existe two method for configure interfaces on LEAF in ACI environment. FABRIC>ACCESS-POLICIES>INTERFACE POLICIES and SWITCH POLICIES but it's possible configure by FABRIC>INVENTORY>POD-X>LEAF-X>CONFIGURE.
Could I consider both correct?
What's the main difference between them?
Solved! Go to Solution.
02-26-2018 12:07 PM
Hi Marcelo,
In my opinion, configuring the interface under the Access Policies is the best method. It allows you to reuse policies and customize your configuration. In addition, you will be able to track down the objects you created and understand what policies are needed to configure an interface. You can use this guide to assist you in that configuration: https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/application-policy-infrastructure-controller-apic/200964-Configure-Access-Polices-Static-Binding.html
As for the Configure tab under Inventory, it basically calls some scripts to create the same objects as above. It behaves similar to the "Basic GUI" (which has been removed in newer versions) or NX-OS like CLI. Once you configure the port, it will run the scripts to create the objects. Just to let you know, there are some bugs in various versions for the Configure tab in general you should be aware of:
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCva56307
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvb00544
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvh79225
Most of these bugs are related to "unintentional" deletion of policies, so it would be safer to use Access Policies instead of the Configure tab.
Thanks,
Jenny Ngo
02-26-2018 12:07 PM
Hi Marcelo,
In my opinion, configuring the interface under the Access Policies is the best method. It allows you to reuse policies and customize your configuration. In addition, you will be able to track down the objects you created and understand what policies are needed to configure an interface. You can use this guide to assist you in that configuration: https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/application-policy-infrastructure-controller-apic/200964-Configure-Access-Polices-Static-Binding.html
As for the Configure tab under Inventory, it basically calls some scripts to create the same objects as above. It behaves similar to the "Basic GUI" (which has been removed in newer versions) or NX-OS like CLI. Once you configure the port, it will run the scripts to create the objects. Just to let you know, there are some bugs in various versions for the Configure tab in general you should be aware of:
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCva56307
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvb00544
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvh79225
Most of these bugs are related to "unintentional" deletion of policies, so it would be safer to use Access Policies instead of the Configure tab.
Thanks,
Jenny Ngo
02-26-2018 12:18 PM - edited 02-26-2018 12:19 PM
Beat me to it! Totally agree:
In my opinion, configuring the interface under the Access Policies is the best method.
02-26-2018 12:26 PM
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: