Hello all--I'm working on a transparent mode service insertion. I'm using an ASA 5510 running 9.17. From the PBR white paper https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-pape...
Hello all--I'm trying to configure an ASA transparent mode service insertion into an ACI fabric using PBR. I believe I have all of the config on the ACI side done correctly. That is, I have no faults on the tenant and when I go into the inventory, ...
Hello Cisco Community--I'm having some problems with the ACI Toolkit. I've downloaded the ACI Toolkit from Github, configured the venv, run the setup.py install using Python 2.7 and installed the acicobra and acimodel eggs. I've been able to get so...
Hello all--I am trying to configure an iSCSI boot where the iSCSI target is a CentoOS VM. The target-VM lives on a host within the same UCS domain as the server I'm trying to bring up. I configured an upstream switch with an SVI for the iSCSI VLAN,...
Hello all--I'm trying to troubleshoot an iSCSI boot from a UCS managed server. The UCSM, I believe, is telling me that it can reach the storage array, but the storage array is telling me that the server is not online. Right now, I'm stuck in the se...
Hello Sergui--thanks for getting back to me. I thought I had the rules configured right, but it turns out that, I've got this going on:cnat-apic-02# fab 101 show zoning-rule scope 3080192--------------------------------------------------------------...
Hello Kirk--the target VM's vnic is configured for the iSCSI VLAN, and the upstream switch interfaces to the FIs are configured for the iSCSI VLAN (the uplinks are trunked). Neither the iSCSI target VM nor the upstream switch interfaces use the iSCS...
Hello William--all of the config in ACI is stored on the APIC cluster. The config is broken into shards and shared among the controllers in the cluster so that the loss of any one of the controllers won't negatively affect the integrity of the confi...
Good morning Andy--with my proposal of a trunk link between the VXLAN fabric and the old switches, you need to keep the SVI up on the network switches. That makes the VXLAN fabric just another "branch" on the STP tree. The idea is to avoid having to...
Andy, A better migration would be to attach the old switches to the VXLAN fabric but leave the SVI up on the old switches using an appropriately sized trunk link. Attach the old network and the VXLAN fabric to the same device providing egress (i.e. c...
