Hello, We currently have default gateway on ACI with Firewall redirection using service graph.Is there a feature in ACI which verifies the firewall availability? If the firewall is reachable apply the PBR and if not apply ACI contract for the communi...
Hello, We currently have vmware servers, hyper-v servers, and bare metal servers behind the Cisco fabric interconnect, which is connected to ACI using two port-channels.Is it possible to create multiple domains (hyper-v, vmware, bare metal) for the i...
Hello, I have configured 2 different L3outs with interfaces on the same leafs. However, all routes that should be advertised only to the first L3out are being advertised also to the second one without adding it to the associated L3 in the bridge doma...
Hello,
Could microsegmentation be achieved if the default gateway is not on the ACI?
Moreover, could it be achieved if the default gateway is on ACI and the bridge domain is in flood mode and not arp proxy?
Hello,
I have an ACI setup with 3 PODs.
I want to connect each POD to an L3out. However, I don't want learned routes to be advertised between PODs.
Whenever I put spines as route reflectors, L3 routes are learned between PODs.
How to make L3out loc...
Thank you for the reply. As for the vlan domain, shouldn't I be using static allocation for the physical domain, and dynamic allocation for the vmware domain?Would this create a problem if the same vlans are in 2 different pools, one static and the o...
Yes, when i say advertised to the L3out I mean the subnet on the bridge domain that is being advertised from the L3out to the external device.Both L3outs are in the same VRF
There is no route on the APIC to this subnet.
However, there was no configuration required in the cisco documentation.
How can i advertise this subnet to the APIC? I have already included it in the fabric external routing profile.
