Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi,I have a questions regarding eiBGP Multipath. 2 iBGP speakers (R1 and R2), peering to the same PE via eBGP. Subnet behind PE is propagated to both R1 and R2, and R1 and R2 propagates that same subnet to each other. Routes are already installed in ...
Is this case practically unused? I have asked around for some production deployments that have Service Graph, and they all use PBR. As far as I could understand, Service Graph (in case of Routed firewall and ADCs) makes ACI render connectivity and co...
Hi community, Does the Import Route Control Subnet work with EPG Subnet in an OSPF NSSA L3Out? Please refer to my use case in the attached photo. Basically, my ACI Leaf is connected to a router managed by a different partner. I would just default-inf...
Dear community, I came across the contract priority section in the Design White Paper, which mentioned:- vzAny-vzAny contract with default filter (from my understanding, basically all filters that have EtherType of unspecified, which includes common/...
Hi community, What is the next-hop for the pervasive route? I found that it's a loopback on one of my Spines (but not on all 4). Is there a name for that loopback? (Like, there's a loopback for PTEP, a loopback for VTEP that is the same on vPC peer, ...
Just want to bump this topic up, since this seems like very unexpected behaviour to me. I also don't think it's mentioned anything special (about NSSA and Import Route Control) in the L3Out White Paper
Hi Sergiu, As I mentioned in the diagram, I did configure NSSA between my border leaf and the remote router. There are no other areas on this border leaf (the backbone is on other leaves). While I expected 10.1.1.0/24 to be added into the RIB with Im...
Hi Sergiu @Sergiu.Daniluk, Thank you so much for your response. So actually according to your test, the implicit filter is different from the default filter and that is why vzAny-vzAny wins over the implicit deny in my case then (not to mention all t...
Thanks for your responses @Sergiu.Daniluk and @Hector Gustavo Serrano Gutierrez, I was able to login to the other APICs using rescue-user. All leaves and spines all have the correct pattern for the certificate. The APIC though, while it appears on ac...
