When attempting to post json configuration of common tenant from live fabric to an Application Centric Infrastructure Simulator (ACI) version 6.1(2g), user experieneces errors: "fv.EpP cannot be modified - please change fv.AEPg instead""fv.RtdEpP can...
Hello All, I am facing a strange issue in ACI :--> My EPG to EPG communication is not happening in he same VRF for eg VM'S in EPG 1111 are not able to ping VM'S in 1112 even though both are in same VRF VZ any contract configured its strange because f...
Hello @Robert Burns / All I'm implementing service graph in PBR mode in a multipod, each pod has an active/standby pair of Firewalls. The fabric consists of one tenant/ one vrf and several bridge domains / EPGs (Network centric) that are spread acros...
We have two User Tenants (Named tenant-1 and tenant-2) on Cisco ACI, and we have integrated with the Firewall as L4-L7. The Firewall is connected to the Cisco ACI Leaf via the Port-Channel (vPC). We create two VDOMs (same physical) and two sub-interf...
Just would like some ideas on how to troubleshoot a leaf/spine upgrade that installed the firmware but then went "unreachable status" for about an hour before I called it a day and left. Here's the upgrade hops that I did.ACI infrastructure just out ...
I feel like I'm missing something that should be obvious. I'm at a loss for identifying where to define a host or a subnet as a source or destination within the contract policy heirarchy.If I have a contract, I can specificy allowed/denied TCP and UD...
I'm working a design that I think is unusual - or at least, my Google-fu can't find very much on the topic.My question: can I do what I'm thinking of? Are there any "gotchas" to be aware of? Is this a supported design (ie, whitepapers, etc)?I'm in ...
Hello ACI people, I came across interesting scenario. I need to create Transit Routing between two different L3Outs, L3Out-A and L3Out-B, they are in different VRFs, VRF-A and VRF-B under one Tenant. L3Out-A is using OSPF and L3Out-B is just a static...
We have one VRF with Vzany, we have configured two devices as a cluster Fortigate Two Arm with PBR source and destination, then we configured two bridge domains and concrete interfaces, service graph routed mode, and we have created two Contracts at...
Our SAML certificate is about to expire and would like to understand the process for the AD side of the house. I know that I have to login to the PCCE IDS and regenerate the SAML Certificate.After that I can download the Metadata file, and it comes ...
Hi communityI have some doubts with these concepts and demostration.I was reading the OCG chapter 8 and the part where speak about types of VlanI know in ACI you configure Vlan pool range for Domain, AAEP (clear for me)Then I know the normal VXLAN yo...
Currently redesigning my DC, need to terminate 2* internet links to one border leaf and another 4 MPLS links to another boder leaf, in order to get benefit for L4L7 service insertion (PBR) of ACI for east west and nrth south traffic using 2 cluster F...
Hello Cisco Community,Secure and controlled access is fundamental to any network, and in Cisco ACI, that foundation is built upon Access Policies.I'm excited to share my latest blog post, "Understanding Cisco ACI Access Policies: A Practical Guide."T...
What is a DCN License for Cisco ACI to using Health Score and Troubleshooting Wizard Feature ?
Hi,I build Cisco ACI using terraform with CI\CD, having only one tenant and one vrf. Since my prod environment is big with thousands of variables, I end up having very big state file and huge delay (7-8 minutes) when running the pipeline.I found that...
