Hi Lee,   What that message mean is that there would be a small interruption in the traffic on the BD when you make the change from flood to proxy or proxy to flood.  It doesn't mean that you need to flap the interfaces.  If you have critical applications that are sensitive to traffic disruption, it is recommended to make this change during a MW.   ... View more

Hi Nik,   In order to have an IGMP querier on your BD you must enable the querier under the BD as well as under the subnet; which will act as the querier.  If you just do it on the subnet, this will not be enough to push the configuration.  You don't have to add a unique ID, the subnet SVI IP will be use as the querier.   You can validate this by running the following command show ip igmp snooping vlan #   where # represents the PI vlan ID of your BD.   If you want to find what this value is, you can simply run the following command   show vlan extended | grep  <BD-NAME>    See Example below: fab4-p1-leaf1# show vlan extended | grep MV-BD  19   MV-Lab:MV-BD                     active    Eth1/29, Eth1/30, Eth1/33, Po1   fab4-p1-leaf1# show ip igmp snooping vlan 19 IGMP Snooping information for vlan 19   IGMP snooping enabled   Lookup mode: IP   Optimised Multicast Flood (OMF) disabled   IGMP querier present, address: 192.168.1.1, version: 3   Querier interval: 125 secs   Querier last member query interval: 1 secs   Querier robustness: 2   Switch-querier enabled, address 192.168.1.1/24, currently running   IGMPv3 Explicit tracking enabled   IGMPv2 Fast leave disabled   IGMPv1/v2 Report suppression enabled   IGMPv3 Report suppression enabled   Link Local Groups suppression enabled   Router port detection using PIM Hellos, IGMP Queries   Number of router-ports: 0   Number of groups: 2   VLAN vPC function enabled   Multicast Routing disabled on VLAN   Active ports:     Eth1/29     Eth1/30     Eth1/33     Po1   I hope this helps     ... View more

Hi In order use PBR you was enable the Route Redirect feature on your service graph template.  Once you deploy your template to the selected EPGs the feature will be able for the consumer and provided EPG.  You also want to make sure that the contract used is associated with the service graph template.    ... View more

Take a look at the videos below it should explain it. Deploying ACI Virtual Edge: Lesson 1: Overview of ACI Application Virtual Edge (AVE) https://learningnetwork.cisco.com/docs/DOC-34674   ... View more

Hi Shahin,   In this particular scenario you can create a second VPC SVI and assign the same IPs as the first VPC.  Note that since you have an active/stanby FW setup, only the active FW should respond to ARP so the fabric would know to which FW if you forward the traffic.   ... View more

Hello,   When you say, “How many UCS can be integrated with APIC controllers”. What do you mean?     If you are asking how many VMM (Microsoft SCVMM) domains you can integrate with the ACI fabric.   See scalability link below, this information is based on ACI 3.1 code.  Look under the Microsoft table.   Scalability Matrix  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/3-x/verified_scalabilty/b_Verified_Scalability_3_1_1x_and_13_1_1x.html#reference_ny1_ygk_tbb     I hope this helps. ... View more

Hi    Yes if you replace the APIC’s  VIC1225 with a VIC1227 this will work.   Thank you ... View more

Hi Scott,   unfortunately you can’t just install the APIC software on any UCS-C series server. To be able to install this software you have to have a server with the APIC PID programed on the hardware.     The error that you see is telling you that the installation software is unable to validate with TPM that this a real “APIC” this done to prevent from “fake” servers to be use as APICs.   General TPM info https://trustedcomputinggroup.org/resource/trusted-platform-module-tpm-summary/     ... View more

Hi Walid,    Unfortunately the ACI fabric can’t be configured as a TACACS or Radius Server    Chapter: TACACs+, RADIUS, LDAP, RSA, and SAML https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/Security_config/b_Cisco_APIC_Security_Guide/b_Cisco_APIC_Security_Guide_chapter_01011.html     ... View more