Categories
ACI Cisco

Multi-Pod, Multi-Site and remote leaf: picking a failure domain

The choice between Multi-Pod and Multi-Site is not about latency or distance. It is about how big you want your change domain to be. Everything else follows.

Categories
ACI Cisco

VRF leaking, shared services and handoff options

VRF leaking in ACI used to be configured by accident, through contracts and subnet flags. ESGs separate leaking from filtering, and that changes the design.

Categories
ACI Cisco

L3Out: getting traffic out of an ACI fabric

The L3Out is where ACI stops being novel and starts being VRF-lite on a leaf switch. Border leaf design, interface types, floating L3Out and convergence.

Categories
ACI Cisco

Route control, external EPGs and transit routing

Three defaults in ACI will drop your traffic without telling you: subnet scope flags, external EPG scoping across the VRF, and the OSPF route tag in a transit design.

Categories
ACI Cisco

The ACI policy model, and the chain that catches everyone

Tenants, VRFs, bridge domains, EPGs and contracts are the easy part. The access policy chain is configured in a separate tree, and that is what catches people.

Categories
ACI Cisco

What an ACI fabric actually is

Most ACI explanations start with the policy model, which is backwards. Start with the three planes and the fact that the APIC is not in the data path.

Categories
AI Cisco

Cisco Cloud Control: one login, one view, one very Cisco-shaped world

Cisco Cloud Control promises one login, one inventory and correlated alerts across the Cisco estate. What’s real, what’s roadmap, and what I’d flag.

Categories
Cisco Dev SDA

Cisco Catalyst Center Jinja Templating: Part 1

Manually configuring hundreds of network devices creates unnecessary friction, even when the differences between configs are minimal. Jinja templating in Catalyst Center lets you parameterise device configurations, so you write a template once and provision devices at scale by feeding in different variable values. This approach eliminates copy-paste errors and makes configuration management auditable and […]

Categories
Cisco LISP Routing SDA

Choosing Your Exit: A Guide to SD-Access Border Node Roles

In our last post, we established that external connectivity in SD-Access is just routing between VRFs — BGP out, VRF-lite handoff, fusion router in between. If you haven’t read it yet, start there. This post builds directly on top of it. Today we’re going to tackle one of the most common points of confusion in […]

Categories
Cisco LISP Routing SDA

Demystifying the Fabric Edge: Why External Routing is Just “VRFs and BGP”

Welcome to the first instalment of our series on Cisco SD-Access design. If you’ve been diving into fabric technology, it’s easy to get lost in the alphabet soup of LISP, VXLAN, and SGTs. But when it comes to the critical task of getting traffic in and out of your fabric, there is a refreshing truth: […]