Hello,   There seems to be an issue with both of the Ansible courses on Devnet. When you install Ansible on MacOS there seems to be an issue with running the Ansible client. These courses are about Cisco ACI with Ansible.    PLAY [USE ACI REST MODULE] **************************************************************************************************************************************************************************************************************************************************************************************************************************************   TASK [ENSURE LAB WORK IS CLEANED UP] **************************************************************************************************************************************************************************************************************************************************************************************************************************** fatal: [sandboxapicdc.cisco.com]: FAILED! => {"changed": false, "msg": "Connection failed for https://sandboxapicdc.cisco.com/api/aaaLogin.json. Request failed: <urlopen error [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:661)>"} to retry, use: --limit @/Users/yvranckx/Documents/CiscoDevnet/aci_ansible_learning_labs_code_samples/intro_module/07_lab_cleanup.retry   PLAY RECAP ****************************************************************************************************************************************************************************************************************************************************************************************************************************************************** sandboxapicdc.cisco.com     : ok=0     changed=0     unreachable=0     failed=1         So this happens every time now when I try to run the playbook on MacOS, I don't think it's a Cisco issue. But has anyone run into this? How did you fix it?   I tried installing OpenSSL via Brew in MacOS, this didn't fix the issue. I have no idea where to start looking, most articles I find are about Linux and none of the fixes apply. ... View more

Hello Guys,   I'm in the process of setting up a Multi-Pod environment with ACI. Everything is going well, except for the 3rd APIC.   I'm a bit unclear on what to put into the script. I 'm configuring it from the 2nd POD, so do i just copy the information from the other APIC which live in a different pod or do i adjust. So that means that i put pod2 in the pod identifier and a different TEP address range?     ... View more

Hello Guys,   I have a question about the migration scenario of a brownfield network towards ACI Greenfield.   I have 2 Data centers seperated physically and i'm going to build a multipod from it. So the phased approach would be: - Build the greenfield fabric ACI - Plan the migration   Now when i build the multipod i will have leafs and spines in each site (2 Spines and 5 leaves each site). This means that when i'm talking about migration. I will have to define a L2out in DC1 and one in DC2 to perform the Layer 2 migration between brownfield and greenfield ACI.   A scenario like this one: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/migration_guides/migrating_existing_networks_to_aci.html   The brownfield is connected to the ACI with a layer 2 trunk in the form of a double sided vPC. But i will have to foresee 2, because i have 2 data centers. Also the brownfield network has a data center interconnect which is a vPC on it's own.   In order to do the layer 2 migration i have to enable arp flooding and something else on the bridge domain inside ACI because of the traffic leaving ACI again in order to be forwarded/routed to the core switch in the brownfield network (nx-os)   But how will that work with 2 data centers? Say i have the vlan moved into the ACI fabric with the way out still being that L2out EPG in a single DC, what if that vlan has also been trunked across the brownfield data center DCI and ends up in the other DC. Won't i make my core switches go haywire for seeing mac address across the vPC doing the DCI and across the vPC going towards the ACI?    Or will this only happen in a scenario i have an active host in both data centers on that same vlan? Then i could manipulate the way ACI sends the traffic out by adding the L2out to the Bridge domain? ... View more