Application Centric Infrastructure

Service Graph deployment for content filtering

We currently are using WCCP for redirection of internet traffic to our content filtering service (Forcepoint/Websense) and would like to look into a migration to our ACI environment. We have deployed service graph for firewall but didn't know if thi...

Resolved! ACI show running-config in XML format

Hello all,I thought there was a way to dump the ACI running config in XML format using the show running-config command but I can't figure it out. I know I can do moquery -o xml but I'm not sure if that's the same thing? I thought there was an argumen...

Configure ACI fabric

Hello, I try to configure nxosv9k as leaf and spine for ACI. After the ios is up, I found some ACI commands cannot work. The output of show version is like below. Anyone can talke a look at if this is correct ios? Thank you switch# show versionCisco ...

Overlapping/Duplicate Subnets on L3outs

Hi Guys,So i wonder if you guys know of a moquery command that i can use to find all the duplicate subnets in the fabric. This also goes for Overlapping subnets. I am planning for our fabric upgrade and one of the requirements is checking all the sub...

VXLAN is used in ACI

Hello, Can we say VXLAN is only used at ACI? or where else it can be used? or we can say without ACI, we do not need VXLAN, so VXLAN is generated only for ACI? thanks

ACI 6.0.1g OVA sim lab - unable to save the config

The ACI OVA has been imported into ESX6.5 and it runs fine, but the configuration cannot be saved permanently on the VM.Every reboot, the initial setup screen appears, and the APIC version is 6.0.1g. Is this expected behavior, or did I configure the ...

Integrating FW to ACI

Hi, just to clarify about the service graph integration because the FW technically have multiple sub-interfaces mapped to each VLANs, can we do a static mapping of those VLANs to the ACI when configuring service graphs? I got confused about the tutor...

Access from EPG in Common Tenant, to service hosted in another tenant

Hi,Trying to allow access from a L3out epg in the common tenant, to a service hosted within another tenant and I just cannot get the connectivity to work.I've tried:Standard contract provided from the second tenant - not available within common tenan...

Resolved! ACI MultiPod Independet Firewalls per pod

Hello Team,Have a quick question about ACI MultiPod fabric and Firewall design. The goal is to have a cluster of two Firepower 4112s in the first Pod and separate/standalone single Firepower 4112 in the second Pod (I cant afford a split spanned Ethrc...

ACI single Spine port connecting to 2 Leafs

Hello all,I am adding a 3rd spine ("Spine 3") to our ACI fabric and we are making use of some fiber patch panels that we have in the datacenter. The fiber patch panel has standard fiber "cassettes" which take an MTP fiber connection on the back of th...

Resolved! Shared Service on Common Tenant with over lapping IP's

When sharing services from the common tenant, and multiple customer tenants use overlapping IP addresses, can ACI do NAT/PAT to work around this? For example, the shared DNS would receive packets from the same source IP from 2 tenants, and not know w...

ACI upgrade order

Gents just for ultimate clarity: 1st i upgrade all APICs & then upgrade switches in fabric, right? tnx in advance. my 1st in-prod upgrade :0)

What is teardown?

Hi all.In APIC, when the work is finished, it should be 'completed' but it becomes 'teardown' and I am in trouble.I can't finish.How do I resolve this? Thank you in advance.Best regards.

Multi-Site: Service-Graph re-direct and local l3out

Hi fellas, we are doing a multi-site deployment with the service-graph re-direct use case to a FW local to each site. {We have 2 x DCs.} ACI Fabric will be the default-gateway for all Vlans/BDs. (Even for secured vlans which were previously behind th...

Resolved! ACI on-demand tech-support file download failed

Hi Team , I created one time on-demand tech-support for my ACI 2 leaf switches. I do see 5 files created and store in my APIC , with all the details of the locations, etc but when I try to download them from APIC to my local PC , it asked for use...

Application Centric Infrastructure

Forum Posts

Service Graph deployment for content filtering

Resolved! ACI show running-config in XML format

Configure ACI fabric

Overlapping/Duplicate Subnets on L3outs

VXLAN is used in ACI

ACI 6.0.1g OVA sim lab - unable to save the config

Integrating FW to ACI

Access from EPG in Common Tenant, to service hosted in another tenant

Resolved! ACI MultiPod Independet Firewalls per pod

ACI single Spine port connecting to 2 Leafs

Resolved! Shared Service on Common Tenant with over lapping IP's

ACI upgrade order

What is teardown?

Multi-Site: Service-Graph re-direct and local l3out

Resolved! ACI on-demand tech-support file download failed

We want to celebrate the October Spotlight Award winners!

Get ready! Great things are coming to Cisco Community

New name, same great product: Cisco Spaces

Access from EPG in Common Tenant, to service hosted in another tenant

ACI single Spine port connecting to 2 Leafs

Multi-Site: Service-Graph re-direct and local l3out

Cisco ACI - How to tell if a port is L1 or L2 down

ACI troubleshoot level3 rx drops

ACI show running-config in XML format

ACI shared interface policy group

Shared Service on Common Tenant with over lapping IP's

ACI MultiPod Independet Firewalls per pod

Cisco ACI Configuration Transfer