cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1776
Views
10
Helpful
3
Replies

Which's the best method for configure interface on ACI Fabric

Basically existe two method for configure interfaces on LEAF in ACI environment. FABRIC>ACCESS-POLICIES>INTERFACE POLICIES and SWITCH POLICIES but it's possible configure by FABRIC>INVENTORY>POD-X>LEAF-X>CONFIGURE.

Could I consider both correct? 

What's the main difference between them?

 

1 Accepted Solution

Accepted Solutions

Jenny Ngo
Level 1
Level 1

Hi Marcelo,

 

In my opinion, configuring the interface under the Access Policies is the best method. It allows you to reuse policies and customize your configuration. In addition, you will be able to track down the objects you created and understand what policies are needed to configure an interface. You can use this guide to assist you in that configuration: https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/application-policy-infrastructure-controller-apic/200964-Configure-Access-Polices-Static-Binding.html

 

As for the Configure tab under Inventory, it basically calls some scripts to create the same objects as above. It behaves similar to the "Basic GUI" (which has been removed in newer versions) or NX-OS like CLI. Once you configure the port, it will run the scripts to create the objects. Just to let you know, there are some bugs in various versions for the Configure tab in general you should be aware of:

 

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCva56307

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvb00544

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvh79225

 

Most of these bugs are related to "unintentional" deletion of policies, so it would be safer to use Access Policies instead of the Configure tab.

 

Thanks,

Jenny Ngo

View solution in original post

3 Replies 3

Jenny Ngo
Level 1
Level 1

Hi Marcelo,

 

In my opinion, configuring the interface under the Access Policies is the best method. It allows you to reuse policies and customize your configuration. In addition, you will be able to track down the objects you created and understand what policies are needed to configure an interface. You can use this guide to assist you in that configuration: https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/application-policy-infrastructure-controller-apic/200964-Configure-Access-Polices-Static-Binding.html

 

As for the Configure tab under Inventory, it basically calls some scripts to create the same objects as above. It behaves similar to the "Basic GUI" (which has been removed in newer versions) or NX-OS like CLI. Once you configure the port, it will run the scripts to create the objects. Just to let you know, there are some bugs in various versions for the Configure tab in general you should be aware of:

 

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCva56307

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvb00544

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvh79225

 

Most of these bugs are related to "unintentional" deletion of policies, so it would be safer to use Access Policies instead of the Configure tab.

 

Thanks,

Jenny Ngo

Beat me to it! Totally agree:

 


In my opinion, configuring the interface under the Access Policies is the best method.

 

RedNectar aka Chris Welsh.
Forum Tips: 1. Paste images inline - don't attach. 2. Always mark helpful and correct answers, it helps others find what they need.

Thank's



I implemented the environment using Access Policies but my customer discovered the option by inventory and asked me about it.


Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Save 25% on Day-2 Operations Add-On License