Hello,    we have an ACI Multi Pod fabric running. The different TEP pools defined under the Pod Fabric Setup Policy. Also the IPN is up and running . APIC Version 3.2(2o) On the Dashboard I found faults F2543 (The fault is raised when there are DHCP issues). The affected objects are the leaf switches from Pod ID 2. Message description:  Issue - Provider MO and Subnet MO not present. Check Pod Setup policy Cause: Invalid Configuration. Also under change set:  clientEvent (Old: requesting, New: pending), configIssues (Old: invalid-podid, New: no-tep-pool-configured), ip (Old: 0.0.0.0, New: <correct IP adress from TEP pool 2>/32) So it seems to be the DHCP assignment works but what about the message? Can anyone explain this or has a similar fault?    Thanks  Udo    ... View more

Hello,    we have an ACI fabric up and running. Since yesterday I can't access the GUI. I got the login screen, enter my credentials (username, password and authentication TACACS). Every time I got the message:  TACACS+ Server Authentication DENIED   But login with putty and the same credentials works.    Any idea?    Thanks Udo  ... View more

Hello,    we need a recommendation for connecting a Checkpoint Firewall Cluster to a ACI fabric. It should be a layer 3 connectivity and each Cluster member must be connected to a different leaf switch.  Between the Cluster and the ACI fabric there is a transfer network and the cluster is working in active/standby.  I noticed there are different solutions to solve this. 1. HSRP VIP on ACI side - > CP Cluster has a static route to this VIP  2. SVI on ACI side - >  CP Cluster has a static route to this SVI IP Address ...tbd   There is no Portchannel between the fabric and the CP cluster. There are single connections. The CP Cluster has also a VIP configured and each physical interface has its own IP Address. From the fabric there a static routed pointing to the firewall VIP.    Are there any best  practices for this design?    Thanks  Udo  ... View more