on 10-26-2023 06:47 AM
A new Interface Configuration scheme has been implemented in ACI version 5.2(7), 6.0(1) and later.
In the past, users had to manually create policies for IF Profile and IF Selector, but with the new method, users only need to assign a Policy Group to a physical port, and APIC will automatically create and assign a system-defined policy for IF Profile and IF Selector. The new system allows users to create and assign IF Profile, IF Profile, IF Selector, and IF Profile, IF Selector policies automatically.
As a result, users no longer need to create and manage IF Profiles and IF Selectors consciously.
Please refer to the following article for an overview of the new system and the procedure for creating a new configuration for a port.
ACI: Interface Configuration (version 6.0 or later)
This article explains what happens to the originally configured Interface Policy when upgrading from a previous version to version 5.2(7), 6.0(1) or later. This article explains what happens to the originally set Interface Policy when upgrading from a previous version to 5.2(7), 6.0(1) or later.
If only one of the nodes in a vPC pair is specified, the following warning message is displayed and rejected.
It can be confirmed that IF Profile and IF Selector have been changed as follows before and after migration.
Clicking Action > Edit Interface Configuration from the Interface Configuration screen will display a screen for changing the description, but if migration has not yet been performed, a message will appear alerting the user that migration will be performed if the settings are changed.
If you do not want to migrate, and would like to keep the previous configuration method, change the description of the Override policy.
(The description set from Fabric > Inventory was actually reflected in the Override policy and applied to the interface.)
The configuration is located at Fabric > Access Policies > Interfaces > Overrides.
If an existing policy does not exist, create a new one and set the interfaces to be associated with it.
Keep in mind that automations are used. For instance, migrating from existing method to new methed involves updating codes, depending on the design and codes complexity, it might not be a option to migrate for some customer.
It is good to see "The existing method (manual creation of IF Profile and IF Selector) is still supported in versions 5.2(7), 6.0(1), and later.", I hope the existing and new methods coexists as promised.
@JC-C
Thank you for your comments.
The new configuration method, "Interface Configuration," is a feature implemented to simplify configuration via the GUI. As you mentioned, if you are making configuration changes via the API, please continue using the existing method without migrating to the new feature.
If you perform configuration changes via the API after migrating to the new method, please note the existence of the new MO "infraPortConfig" for Port Configuration. Additionally, if you are using IaC tools like Ansible, update the collections to the latest version and use the modules for Interface Configuration.
Below is an example for Ansible.
- name: Add an interface with Switch Port policy group
cisco.aci.aci_interface_config:
host: “{{ apic_ip }}”
username: “{{ apic_user }}”
password: “{{ apic_pass }}”
role: leaf
port_type: access
interface_type: switch_port
policy_group: “{{ Policy_Group }}”
node: 201
interface: "1/16"
state: present
For New Method: cisco.aci.aci_interface_config module
https://docs.ansible.com/ansible/latest/collections/cisco/aci/aci_interface_config_module.html
Thank you.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: