Contracts in ACI: Lesson 4: Demo and Best Practice

     

     

    Lesson 4: Demo and Best Practice

     

    Lesson 4: Demo and Best Practice

     

     

    In this free ACI training video, John Meng shows a Demo and Best Practice. The following additional informational resources are provided in this lesson. Show Additional Information

     

    Demo

    • Create zmeng-tn-ICMP in tenant.
    • VRF enforced or Unenforced
    • Contract vzAny
    • Preferred group in VRF
    • Contract EPG-EPG in same VRF (EPG-L3out)
    • Inter-VRF leaking

     

    Scenarios

    TN: zmeng-Prod:

    • VRF in “Enforced” mode
    • No contract applied
    • Every EPG can talk to each other

     

    TN: zmeng-Prod:

    • VRF in “Enforced” mode
    • Contract applied to EPG collections (vzAny)

     

    TN: zmeng-Prod:

    • VRF in “Enforced” mode
    • With preferred group contract applied

     

    TN: zmeng-Prod:

    • VRF in “Enforced” mode
    • With contract applied b/w EPGs

     

    TN: zmeng-Prod:

    • VRF in “Enforced” mode
    • With Inter-VRF leaking
    • Route updated
    • Note:
      • subnet shared?
      • Contract scope in Global?

     

    Common Issues on Contracts

    • Configuration
      • Filter missed in Contract
      • Contract direction applied in wrong direction
      • Wrong scope of contracts
      • Contract leaking (shared by different EPGs, label will be helpful)

     

    Best Practice

    • Proper contract "Scope”
    • Contracts in individual tenants rather than in tenant Common (except for shared service)
    • Reuse “Filters” defined in tenant Common.
    • Clearly understand Provider and Consumer EPG(s), typically when deploy inter-VRF leaking and shared service across Tenants.
    • Consider the number of filter rules and the impact on leaf node hardware entries.
    • Leverage vzAny if applicable to TCAM resource, eg, if SSH service across whole VRF
    • Be sure that you understand how vzAny interacts with VRF leaking and how it influences L3Out routing announcements

     

    Lesson 1: Contracts Concept and Deployment in ACI part 1

    Lesson 2: Contracts Concept and Deployment in ACI part 2

    Lesson 3: Contracts Verification

    Lesson 4: Demo and Best Practice

    Review ACI Certification Options

    ACI Discussions

    Watch more ACI Training Videos

    ACI Training Resources