EMAIL SUPPORT

dclessons@dclessons.com

LOCATION

NZ

ACI Inter Tenant Connectivity

ACI Inter Tenant Connectivity

Posted on Jan 24, 2020 (0)

LAB: ACI Inter Tenant Connectivity

Topology:

TASK: Follow the below following task to complete the ACI Inter Connectivity Configuration.

TASK1: Configure Global Contract to be exported to another Tenant

  • Configure Global Contract named DCL-GLOBAL-CONTRACT and make it scope Global with subject name SUBJECT-ANY Apply Both Direction and Reverse Filter Ports checked.
  • Select the DCLessons-FILTER-ANY filter in to it.

TASK 2: Configure another tenant components.

  • Configure another Tenant named DCLessons1 with VRF DCLessons1-VRF and BD DCLESSONS1-BD.
  • Configure Subnets 10.12.3.254/24 as Gateway with Private to VRF
  • Configure Filter DCLessons1-FILTER-ANY with Name: DCLessons1-ANY, Ethertype: unspecified.
  • Configure Application Profile named DCLessons1-AP-Profile with EPG DCL1-WEB-EPG on BD DCLESSONS1-BD.

TASK 3: Export Global Contracts to other Tenant

In Tenant DCLessons, Contracts Create Export Contracts named DCL-EXPORT-CONTRACT and associate Global Contract DCL-GLOBAL-CONTRACT and Select Second Tenant DClessons1.

Task 4: Repeat Task 1 and Task 3 for Second Tenant DCLessons1

TASK 5 Create EPG Subnets to be leaked to another Tenant

  • Access to Web_EPG and create Web_EPG subnets with gateway IP 10.11.3.254/24 with Scope to VRF: checked and Shared between VRF: Checked and Advertise Externally: Unchecked.
  • Repeat above Task for another Tenant.

TASK 6: Configure Contracts between Web EPG of both Tenants.

  • On Tenant DCLessons EPG: Web_EPG attach the DCL-GLOBAL-CONTRACT at provider side and add DCL1- EXPORT-CONTRACT at consumed side.
  • Repeat the above steps for another Tenant.

Solution:

TASK1:

Configure Global Contract to be exported to another Tenant

  • Configure Global Contract named DCL-GLOBAL-CONTRACT and make it scope Global with subject name SUBJECT-ANY Apply Both Direction and Reverse Filter Ports checked.
  • Select the DCLessons-FILTER-ANY filter in to it.

Configure Global Contract named DCL-GLOBAL-CONTRACT and make it scope Global with subject name SUBJECT-ANY Apply Both Direction and Reverse Filter Ports checked.

  • Click on DCLessons Tenants | Security Policies | Contracts
  • Right-click the Contracts and then select Create Contract
  • In the Create Contract wizard create Contract named DCL-GLOBAL-CONTRACT and make it scope Global

  • On subject name Click on + and create subject SUBJECT-ANY Apply Both Direction and Reverse Filter Ports checked.
  • Select the DCLessons-FILTER-ANY filter in to it

TASK 2: Configure another tenant components.

  • Configure another Tenant named DCLessons1 with VRF DCLessons1-VRF and BD DCLESSONS1-BD.
  • Configure Subnets 10.12.3.254/24 as Gateway with Private to VRF
  • Configure Filter DCLessons1-FILTER-ANY with Name: DCLessons1-ANY, Ethertype: unspecified.
  • Configure Application Profile named DCLessons1-AP-Profile with EPG DCL1-WEB-EPG on BD DCLESSONS1-BD.

Screen Short of this Task is not given as this is expected by everyone that they will be able to create this by own.


Comment

    You are will be the first.

LEAVE A COMMENT

Please login here to comment.