Overlapping vlan from different domains within same EPG

[aqrxz]

We are looking to create a staging Tenant to have a testbed for applications within data center.

All configuraitons expected to be isolated from the production such as Physical domains, Vlan Pools, AEP, etc...

However, the VM server ESX Host required to have 1 vlan for vCenter to mange the the host and thus we need to add this Staging domain into Production's EPG. This vlan id is also required to be the same vlan as current vlan being used in production.

I've checked the document below and found recommendation to avoid adding the domain into AEP, but in our case it will be different AEP with the same VLAN id. Would you guys advise if this could be possible?

Cisco APIC Layer 2 Networking Configuration Guide, Release 4.1(x) - EPGs [Cisco Application Policy Infrastructure Controller (APIC)] - Cisco

When an EPG has more than one physical domain with overlapping VLAN pools, avoid adding more than one domain to the AEP that is used to deploy the EPG on the ports. This avoids the risk of traffic forwarding issues.

PS. the switch that's connecting to staging server also have the production servers running through, so it will be 2 Physical domains deployed.

[Robert Burns]

Can you clarify what you mean by " the VM server required to have 1 vlan for their vCenter to mange the VM guest". ?
Are you referring to the Hypervisor Host (ESX) or a Virtual machine (endpoint) needing an interface in the Prod Tenant/Domain? Typically vCenter would need communication to manage only the hosts, not the VMs themselves.  VMs aren't an issue.  If you need your Hypervisor Host separated into this staging environment, but its going to be managed by the same Prod vCenter - that's another case.

Clarify further, then we can advise.

Robert

[aqrxz]

Sorry for misleading you on that point. I was meant about vCenter to mange the ESX host.

Our fabric didn't use VMM integration so the ESX host managed by vCenter via one of the EPG in Prod Tenant. 

Our requirements is

1. Physical domain / Vlan pool / AAEP are separated between staging and prods environments

2. Staging and Prods vlan pools don't have overlapping VLAN ID

3. only VM mangement EPG that needed to use one of the prods vlan

So, is it possible with below options? Or is there any availalbe method that you could advise?

1. Add Staging PD into VM management EPG and add the same vlan id into staging AAEP?, i believe this option might not be possible since there's 2 PD with the same vlan id exist in the EPG

2. The interface connected to ESX host to use Staging AAEP then add prods PD into staging AAEP?, this will have the whole VLAN in data center contains in staging AAEP.

Thanks in advance.