About tuanquangnguyen

tuanquangnguyen · 08-09-2022

Assuming I have a service graph that redirects the traffic to a pair of HA firewalls. Aside from the recommendation that the IP SLA timer (probe frequency x multiplier) for PBR Policy should be greater than the actual firewall failover timer, are the...

tuanquangnguyen · 07-13-2022

Hi folks, A client of mine is experiencing a "connection timed out" between endpoints in the same EPG. The issue happens infrequently. Upon checking under EP tracker, most of the endpoint pairs reside under different vPCs (on the same Leaf pair). The...

tuanquangnguyen · 01-21-2022

Hi folks,Does changing the Port Tracking setting on ACI (namely, enabling it, or modifying the number of active uplinks) cause any disruption?A customer does not have that enabled, and is requiring it to be enabled with 0 active uplinks, in order for...

tuanquangnguyen · 12-30-2021

Hi team,Is there a typo on this document: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/b_Cisco_ACI_and_Forward_Error_Correction.html Am I supposed to set this to IEEE-RS-FEC? Thanks

tuanquangnguyen · 12-08-2021

Hi folks,Recenly got a pentest team coming in with a few nginx vulnerabilities found on Cisco APIC.I would like to ask:If there are any way to determine the running nginx version on the Cisco APIC?If upgrading Cisco APIC (and in turn the fabric switc...

tuanquangnguyen · 10-31-2022

Apologies for hijacking this old topic, but does this mean that traffic between endpoints (in either same or different EPGs) passing through the Leaf switches (with gateway on ACI) cannot be tcpdump'ed on the Leaf themselves? Tuan

tuanquangnguyen · 08-14-2022

Hi, It should be mentioned under the "Multiple active/standby HA pairs design consideration" section, in the PBR White Paper.

tuanquangnguyen · 08-09-2022

Hi Tarakesh, There are no DPP configured (on neither EPG nor interfaces). I've checked with the client and it seems they are operating a really basic designed ACI fabric. Recently it seems the situation has become more stable, so they're trying to ge...

tuanquangnguyen · 02-17-2022

Adding in to Chris's solution, I think if he requires VLAN 1 to be native on a trunk instead of an access port (that access VLAN 1), select Access (802.1P) for Mode. It would put a "switchport trunk native vlan 1 EPG epg_abcd" under that interface/vP...

tuanquangnguyen · 02-17-2022

Digging through a few ACI documents, I think that they are supposed to be different protocols. While both can be regarded as southbound protocols, IFM seems to only interact with fabric nodes (and not many documents mentioning it) and OpFlex interact...

Member Since	‎08-01-2018 09:54 PM
Date Last Visited	‎07-04-2024 01:23 AM
Posts	102
Total Helpful Votes Received	65

User Statistics

User Activity

Is there a recommended baseline for PBR IP SLA timer?

Intermittent connection time-out between endpoints in the same EPG

Does changing Port Tracking setting cause disruption?

FEC for SFP-25G-SR-S port on a N9K-C93180YC-FX... typo?

Is there way to determine nginx version used with which APIC release?

Re: TCPDump on Leaf (ACI)

Re: Is there a recommended baseline for PBR IP SLA timer?

Re: Intermittent connection time-out between endpoints in the same EPG

Re: Vlan Native 1 - Mellanox Cumulus

Re: Cisco ACI IFM and OpFlex Correlation