About ThiloS

ThiloS · 01-25-2021

Hello,I have read several contradictory statements in Cisco Documentation about the stateful flag in aci filters:Sometimes it says that it is only used for legacy AVS deployments where the AVS was REALLY doing stateful filtering. If AVS is not used i...

ThiloS · 10-22-2020

Hello,I understand that Contracts in ACI that are enfored by the leafs are stateless ACL. When is an ACI Contract stateful?- as far as I know when using AVS/AVE?- what about when using Kubernetes/Openstack integration with ovs?

ThiloS · 10-21-2020

Hello,do you think it is possible to use NSX-T 3.0 with native VDS support on top of ACI so that ACI is still configuring the VDS via VMM integration and NSX-T only serves as Distributed Firewall for microsegmentation without NSX-Overlay (VLAN-Backed...

ThiloS · 08-04-2020

Hello,we are thinking about implementing vmm-integration in our aci-fabric. We are using hundreds of VLANs already. For VMM integration most of the time design guides show dynamic vlan assignment. We would need a free unused vlan-range to reserve for...

ThiloS · 08-04-2020

Hello all,I fail to understand why you would use VXLAN-Encapsulation for a static binding in ACI: All design guides I see utilize VLAN-TAGs for EPG Classification on Server-Ports. You can however create VXLAN-Pools and use VXLAN-TAGs to map Packets t...

ThiloS · 01-25-2021

thank you, yes I already knew this Post and it was useful as well. I just wonder why you obviously can configure the same thing either with a filter using the tcp session rules (flags) manually or by using the stateful checkbox. Also I am 100% sure t...

ThiloS · 01-25-2021

Thank you! A perfect detailed response finally! Good job!

ThiloS · 10-26-2020

just found this: Seems like Cisco added NSX-T to VMM-Domain that you can link to: https://www.cisco.com/c/en/us/td/docs/dcn/aci/vmware-nsx-t/cisco-aci-and-vmware-nsx-t-integration.html

ThiloS · 08-05-2020

I did watch some ciscolive sessions about Kubernetes/Openshift integration in ACI. There you see that an open Vswitch is installed into the hosts and this switch talks opflex to ACI and is configured just like a VMM integration. This way you see the ...

ThiloS · 08-05-2020

Hi @RedNectar, thank you for the detailed response. So ACI can learn endpoints from third party vxlan encapsulated packets and not just the "VTEPs" (=outer IPs)?When two docker hosts using VXLAN communicate over ACI fabric the LEAFs would learn all c...

Member Since	‎04-08-2019 03:43 AM
Date Last Visited	‎02-17-2021 12:04 AM
Posts	12
Total Helpful Votes Received	10

User Statistics

User Activity

Meaning of stateful-flag in aci filter

When are ACI Contracts stateful?

NSX-T on top of ACI - Microsegmentation only

Benefit of dynamic vlan assignment in VMM Integration

ACI Static Binding VXLAN

Re: Meaning of stateful-flag in aci filter

Re: Meaning of stateful-flag in aci filter

Re: NSX-T on top of ACI - Microsegmentation only

Re: Encap of the Endpoint in ACI

Re: Encap of the Endpoint in ACI