Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi @mail2bhavik ,Yes, you can make an L3Out with the firewall and announce BD subnets via it, however the design would be complex. Since you are forcing E-W traffic out of ACI fabric, you must use a multi-VRF design - because if the BDs are part of t...
Hi @vacumjh ,STP BPDUs are flooded within the fabric/EPG encap (allocated per vlan encap in a domain), so it uses flood in encapsulation.Also, as per documentation "Flood in encapsulation is not supported for EPG and bridge domains that are extended ...
Hi @packet2020 ,In general, you can't have multiple External EPGs in the same Tenant VRF with the same subnet(s) inside, since ACI must be able to classify external traffic based on that without doubts. Although you won't get a fault in APIC, you wi...
Hi @JlassiAhmed0345 ,It looks like the endpoints are aging and there is no mechanism enabled to prevent that from happening. For endpoints that have IP addresses associated with them, there is a feature called "Host Tracking", which can be enabled by...
