ACI · EPG

ACI-style: an application profile, EPG and static path

An endpoint group (EPG) is a set of hosts that share policy, whatever their subnet or port. A static path says which leaf port, on which VLAN, belongs to the EPG. Access policies (VLAN pool, physical domain, AEP, policy group) are ready; the next labs build those. Put PC1 and PC2 in one EPG.

Cisco ACI-style track · Cisco ACI-style · 5 objectives

Open in simulator More Cisco ACI-style labs

Objectives

The simulator ticks each one as soon as the network meets it.

In T1, create application APP and EPG WEB in bridge domain BD10, using physical domain PHYS1.
Add static paths for leaf 101 port 1/3 and leaf 102 port 1/3, on VLAN 10, untagged.
show faults: no faults.
show epg shows both paths up.
Ping PC2 (192.168.10.20) from PC1.

Start this lab

Before you start

show endpoint ip or mac on a leaf finds a host. On a spine, show coop internal info repo ep key finds it across the fabric, and on a leaf show system internal epmc endpoint move lists hosts that moved port. Hosts in one EPG talk freely. Each leaf tags VLAN 10 locally, but the fabric carries a VNI that belongs to the bridge domain, so the VLAN number only matters on the wire to the host.

Concept

ACI: a fabric run by policy

An ACI fabric is run from a controller. You describe tenants, bridge domains and groups of hosts, and the controller works out what each switch needs. An endpoint group (EPG) is hosts that share policy, wherever they are. A static path puts a leaf port and VLAN into an EPG, and the access-policy chain limits which VLANs may be used where. Underneath, leaves are VXLAN tunnel endpoints, which you never configure.