Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello,I have read several contradictory statements in Cisco Documentation about the stateful flag in aci filters:Sometimes it says that it is only used for legacy AVS deployments where the AVS was REALLY doing stateful filtering. If AVS is not used i...
Hello,I understand that Contracts in ACI that are enfored by the leafs are stateless ACL. When is an ACI Contract stateful?- as far as I know when using AVS/AVE?- what about when using Kubernetes/Openstack integration with ovs?
Hello,do you think it is possible to use NSX-T 3.0 with native VDS support on top of ACI so that ACI is still configuring the VDS via VMM integration and NSX-T only serves as Distributed Firewall for microsegmentation without NSX-Overlay (VLAN-Backed...
Hello,we are thinking about implementing vmm-integration in our aci-fabric. We are using hundreds of VLANs already. For VMM integration most of the time design guides show dynamic vlan assignment. We would need a free unused vlan-range to reserve for...
Hello all,I fail to understand why you would use VXLAN-Encapsulation for a static binding in ACI: All design guides I see utilize VLAN-TAGs for EPG Classification on Server-Ports. You can however create VXLAN-Pools and use VXLAN-TAGs to map Packets t...
thank you, yes I already knew this Post and it was useful as well. I just wonder why you obviously can configure the same thing either with a filter using the tcp session rules (flags) manually or by using the stateful checkbox. Also I am 100% sure t...
just found this: Seems like Cisco added NSX-T to VMM-Domain that you can link to: https://www.cisco.com/c/en/us/td/docs/dcn/aci/vmware-nsx-t/cisco-aci-and-vmware-nsx-t-integration.html
I did watch some ciscolive sessions about Kubernetes/Openshift integration in ACI. There you see that an open Vswitch is installed into the hosts and this switch talks opflex to ACI and is configured just like a VMM integration. This way you see the ...
Hi @RedNectar, thank you for the detailed response. So ACI can learn endpoints from third party vxlan encapsulated packets and not just the "VTEPs" (=outer IPs)?When two docker hosts using VXLAN communicate over ACI fabric the LEAFs would learn all c...
