Implementing Cisco ACI: Ensuring Scalable Solutions for Multiple EPGs in a VRF

Ensuring Scalable Solutions for Multiple EPGs in a VRF

Question

Which two actions should be taken to ensure a scalable solution when multiple EPGs in a VRF require unrestricted communication? (Choose two.)

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E.

CD.

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/basic-configuration/Cisco-APIC-Basic-Configuration-Guide-42x/Cisco-

In Cisco Application Centric Infrastructure (ACI), an Endpoint Group (EPG) is a logical grouping of endpoints that share a common policy. A Virtual Routing and Forwarding (VRF) is a virtual network that provides isolation between different sets of endpoints. When multiple EPGs within a VRF require unrestricted communication, there are two actions that should be taken to ensure a scalable solution.

  1. Configure a taboo contract between the EPGs that require unrestricted communication between each other. A taboo contract is a contract that denies communication between two EPGs. By configuring a taboo contract between the EPGs that require unrestricted communication between each other, we can prevent them from communicating with other EPGs within the VRF. This helps to ensure that the solution remains scalable, as it avoids the need to configure individual contracts between each EPG that requires unrestricted communication.

  2. Set the EPGs that require unrestricted communication between each other as preferred group members. A preferred group member is an EPG that is given priority in traffic forwarding decisions. By setting the EPGs that require unrestricted communication between each other as preferred group members, we can ensure that traffic between these EPGs is forwarded more efficiently. This helps to ensure that the solution remains scalable, as it reduces the load on the ACI fabric.

Option B, enabling Preferred Group Member under the EPG Collection for VRF section, and option C, setting the VRF policy control enforcement preference to Unenforced, are not relevant to the question, as they do not address the issue of unrestricted communication between multiple EPGs within a VRF.

Option E, setting the EPGs that require policy enforcement between each other as preferred group members, is also not relevant to the question, as it does not address the issue of unrestricted communication between multiple EPGs within a VRF.