cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
882
Views
10
Helpful
3
Replies
Highlighted
Contributor

Which's the best method for configure interface on ACI Fabric

Basically existe two method for configure interfaces on LEAF in ACI environment. FABRIC>ACCESS-POLICIES>INTERFACE POLICIES and SWITCH POLICIES but it's possible configure by FABRIC>INVENTORY>POD-X>LEAF-X>CONFIGURE.

Could I consider both correct? 

What's the main difference between them?

 

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Beginner

Re: Which's the best method for configure interface on ACI Fabric

Hi Marcelo,

 

In my opinion, configuring the interface under the Access Policies is the best method. It allows you to reuse policies and customize your configuration. In addition, you will be able to track down the objects you created and understand what policies are needed to configure an interface. You can use this guide to assist you in that configuration: https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/application-policy-infrastructure-controller-apic/200964-Configure-Access-Polices-Static-Binding.html

 

As for the Configure tab under Inventory, it basically calls some scripts to create the same objects as above. It behaves similar to the "Basic GUI" (which has been removed in newer versions) or NX-OS like CLI. Once you configure the port, it will run the scripts to create the objects. Just to let you know, there are some bugs in various versions for the Configure tab in general you should be aware of:

 

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCva56307

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvb00544

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvh79225

 

Most of these bugs are related to "unintentional" deletion of policies, so it would be safer to use Access Policies instead of the Configure tab.

 

Thanks,

Jenny Ngo

View solution in original post

3 REPLIES 3
Highlighted
Beginner

Re: Which's the best method for configure interface on ACI Fabric

Hi Marcelo,

 

In my opinion, configuring the interface under the Access Policies is the best method. It allows you to reuse policies and customize your configuration. In addition, you will be able to track down the objects you created and understand what policies are needed to configure an interface. You can use this guide to assist you in that configuration: https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/application-policy-infrastructure-controller-apic/200964-Configure-Access-Polices-Static-Binding.html

 

As for the Configure tab under Inventory, it basically calls some scripts to create the same objects as above. It behaves similar to the "Basic GUI" (which has been removed in newer versions) or NX-OS like CLI. Once you configure the port, it will run the scripts to create the objects. Just to let you know, there are some bugs in various versions for the Configure tab in general you should be aware of:

 

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCva56307

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvb00544

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvh79225

 

Most of these bugs are related to "unintentional" deletion of policies, so it would be safer to use Access Policies instead of the Configure tab.

 

Thanks,

Jenny Ngo

View solution in original post

Highlighted
Collaborator

Re: Which's the best method for configure interface on ACI Fabric

Beat me to it! Totally agree:

 


In my opinion, configuring the interface under the Access Policies is the best method.

 

RedNectar
aka Chris Welsh


Don't forget to mark answers as correct if it solves your problem. This helps others find the correct answer if they search for the same problem

Highlighted
Contributor

Re: Which's the best method for configure interface on ACI Fabric

Thank's



I implemented the environment using Access Policies but my customer discovered the option by inventory and asked me about it.