Hi there, I would like to know what are the ways to migrate catalyst 9k switches already running in the network which is configured with dot1x and needs to be migrated to Cisco SDA. Current setup of the customer:They have 4 branches and 1 HQ where t...
Hi there,
I just need some clarity in understanding the deployment option of F5 load balancer ( or any 3rd party devices) in ACI.
Say for example, if I have F5 in 2 arm-mode(routed) and both the interfaces are in 2 different subnets and I need al...
Hi there,
I am new to Cisco ACI and wanted to know how can I control VM to VM traffic using Cisco ACI. If we deploy vDS from Cisco ACI, I believe we will have full visibility to the VM traffic but what if we are not allowed to manage or deploy the ...
Hello,
I have few queries with respect to NSX over ACI. Appreciate if you could help me understand better.
1) VMware Integration:
Since VMware NSX is already present in the network, routing, Switching and firewall services are provided by NSX. Sh...
Hi All,
I Just needed a clear understanding to design my network for ACI.
Here is my design consideration.
I have around 15 applications where some applications are 3 tier (Web-App-DB) and some are 2 tier ( DB-App). Consider for example I have Ap...
Thanks for the clarification.
One last question:
What if I have multiple applications residing in different EPGs that needs to be load balanced? For example, I would need to load balance web traffic for clients coming from outside then I can create...
So in this case, when F5 is in 2 arm mode, connected to 2 different subnets, I can just add the respective interfaces in their EPGs and I would still work right?
Then what is the use of service graph and since it is not required in the above scenar...
Hi Jayesh,
Thanks for sharing the above link (very useful).
The above result can still be achieved by placing F5-out interface in External EPG/BD and F5-in interface in Internal EPG/BD. and create contracts between them.
So my question is why do i...
Thanks for that clarification made. So that leads me to a conclusion that unless I deploy an AVS or AVE in the hypervisor, VM to VM traffic within the same host cannot be controlled by ACI.
Am I right?
