Category Archives: ACI

Foolproof Validation of the ACI Access Policy Chain

Posted on 2022/08/26 by RedNectar Chris Welsh

Have you ever come across an invalid-vlan or invalid-path error in an ACI Endpoint Group, L3Out or Tenant? The chances are, there is a problem in your Access Policy Chain – i.e. the collection of Access Policies that you created before … Continue reading →

Posted in Access Policies, Access Policy Chain, ACI, ACI Tutorial, Cisco | Tagged , | Leave a comment

Are Interface Descriptions in ACI using magic?

Posted on 2021/12/07 by RedNectar Chris Welsh

If there are TWO ways of getting a description into the Physical Interface Description, which one wins? Let’s have a duel. Continue reading →

Posted in Access Policies, ACI, ACI API, Cisco | Tagged | Comments Off on Are Interface Descriptions in ACI using magic?

Cisco has re-vamped their ACI Docs pages. Here’s what I think.

Posted on 2021/06/17 by RedNectar Chris Welsh

What Cisco has done is given us not just a prettier version, but in many cases more useable too Continue reading →

Posted in ACI | Comments Off on Cisco has re-vamped their ACI Docs pages. Here’s what I think.

ACI and the HyperFlex Hiccup Cure

Posted on 2021/05/14 by RedNectar Chris Welsh

In this post I’ll show you how I reduced that failover time for HyperFlex Connect to about one minute. Continue reading →

Posted in ACI, Cisco, Hyperflex | Comments Off on ACI and the HyperFlex Hiccup Cure

ACI and the HyperFlex Hiccup

Posted on 2021/04/27 by RedNectar Chris Welsh

the problem relates to how Cisco HyperFlex uses a floating IP address across multiple Storage Controller VM MAC addresses, and how ACI maintains the IP to MAC address table Continue reading →

Posted in ACI, Best Preactices, Cisco, GNS3 WorkBench, Hyperflex | Tagged , , | 3 Comments

New APIC ACI 5.1 firmware – Cisco have gone colloquial

Posted on 2020/10/25 by RedNectar Chris Welsh

This is an absolute affirmation that Cisco only cares about North American users Continue reading →

Posted in ACI, Cisco, rant | Tagged , , | 1 Comment

Making the most of ACI when routing between tenants via a Firewall

Posted on 2020/10/06 by RedNectar Chris Welsh

I’ll show you how you can enhance your ACI migration by using some ACI features that are practically impossible to implement on L3 Firewalls Continue reading →

Posted in ACI, ACI Tutorial, Cisco, configuration tutorial, Data Center, Data Centre | Comments Off on Making the most of ACI when routing between tenants via a Firewall

ACI Version mismatch Alert. Don’t use v5 on APIC and v14 on Leaves

Posted on 2020/09/05 by RedNectar Chris Welsh

If you are stuck with some first-generation switches in your ACI fabric, you might be tempted to upgrade your APIC to version 5.x – maybe even attempt to upgrade your leaf switches to the companion v15.x. Let me tell you why you don’t want to do that. Continue reading →

Posted in ACI, Cisco, Data Center, Data Centre | Comments Off on ACI Version mismatch Alert. Don’t use v5 on APIC and v14 on Leaves

moquery – Cisco’s Mysterious Obscure ACI query utility

Posted on 2020/04/09 by RedNectar Chris Welsh

Take some of the mystery and obscurity out of Cisco’s Managed Object query. The final outcome will be that you will be equiped with the knowledge to write a script and adapt to suit your needs. Continue reading →

Posted in ACI, ACI Tutorial, Cisco, Master Class | Tagged , , , , | 1 Comment

ACI Inband Mangagment Route Leaking Kludge

Posted on 2019/12/01 by RedNectar Chris Welsh

When I was challenged with this: Hi @RedNectar , Right now I have a simple contract that allows SSH only: Scope set to global. TCP dst 22. “Both directions” and “reverse port filters” enabled. This contract is provided by the inband EPG … Continue reading →

Posted in ACI, aci inband management, ACI inband management tutorials, ACI Tutorial, Cisco | Tagged , , , | 2 Comments