Have you tried deleting the host key for the old device? Depending on from where you're trying to access the new APIC there could be different ways to do that. On a linux system you should have to type something like ssh-keygen -R CN-DEF-01-01 This should also work on the other APICs. When you then SSH to the new device it's presenting it's own key and you can accept it.   kind rergards, Nik ... View more

Hi, what you say is correct but you are missing some steps. The most important one for your question is the Interface Policy Group (IPG). This is where you define the characteristics of the physical Interface. For single Leaf Ports you can create IPGs for your typical use case and re-use them for every port where you want those settings to be. For (virtual) Port-Channels this is a little bit different. Even if the settings you want might be identical, you have to create a separate IPG for every (v)PC. The IPG essentially defines which ports will be put into one (v)PC, so if you'd reuse an existing one ACI would try to put the new ports into the existing channel rather than creating a new one. As to your second scenario: I would not recommend to do so but to achieve your goal you would first create a VPC IPG. Then you'd create two separate Interface Profiles one specifying port 1/8 and one specifiying port 1/9. Each will be linked to your IPG and thus showing ACI that they belong to the same VPC. Now you also need to separate Switch Profiles because you don't want port 1/8 on 102 and 1/9 on 101. After you created those you attach the Interface Profile for 1/8 to the Switch Profile of 101 and the Interface Profile for 1/9 to the Switch Profile of 102. What you also need in either case (also with your 1/10 on both switches scenario) is a VPC Protection Group defining the VPC domain between 101 and 102. Also you need an AEP, VLAN Pool and Physical Domain to really make use of the VPC but I assume this is clear to you.   Kind regards, Nik ... View more