The choice between Multi-Pod and Multi-Site is not about latency or distance. It is about how big you want your change domain to be. Everything else follows.
The choice between Multi-Pod and Multi-Site is not about latency or distance. It is about how big you want your change domain to be. Everything else follows.
VRF leaking in ACI used to be configured by accident, through contracts and subnet flags. ESGs separate leaking from filtering, and that changes the design.
The L3Out is where ACI stops being novel and starts being VRF-lite on a leaf switch. Border leaf design, interface types, floating L3Out and convergence.
Three defaults in ACI will drop your traffic without telling you: subnet scope flags, external EPG scoping across the VRF, and the OSPF route tag in a transit design.
Tenants, VRFs, bridge domains, EPGs and contracts are the easy part. The access policy chain is configured in a separate tree, and that is what catches people.
Most ACI explanations start with the policy model, which is backwards. Start with the three planes and the fact that the APIC is not in the data path.
Cisco Cloud Control promises one login, one inventory and correlated alerts across the Cisco estate. What’s real, what’s roadmap, and what I’d flag.
Manually configuring hundreds of network devices creates unnecessary friction, even when the differences between configs are minimal. Jinja templating in Catalyst Center lets you parameterise device configurations, so you write a template once and provision devices at scale by feeding in different variable values. This approach eliminates copy-paste errors and makes configuration management auditable and […]
In our last post, we established that external connectivity in SD-Access is just routing between VRFs — BGP out, VRF-lite handoff, fusion router in between. If you haven’t read it yet, start there. This post builds directly on top of it. Today we’re going to tackle one of the most common points of confusion in […]
Welcome to the first instalment of our series on Cisco SD-Access design. If you’ve been diving into fabric technology, it’s easy to get lost in the alphabet soup of LISP, VXLAN, and SGTs. But when it comes to the critical task of getting traffic in and out of your fabric, there is a refreshing truth: […]