What location are security policies enforced in ACI?

The correct answer is A. leaf. In Cisco ACI, security policies (Contracts/filters between EPGs) are enforced at the leaf switches, specifically at the ingress leaf where an endpoint is connected. The leaf is the point of attachment for endpoints and is where all policy lookups, filtering, and forwarding…

Advanced Data Center Networks

Question

Options

Aleaf
Bspine
Ccore
Ddistribution

How the community answered

(38 responses)

A
89% (34)
B
3% (1)
C
5% (2)
D
3% (1)

Explanation

In Cisco ACI, security policies (Contracts/filters between EPGs) are enforced at the leaf switches, specifically at the ingress leaf where an endpoint is connected. The leaf is the point of attachment for endpoints and is where all policy lookups, filtering, and forwarding decisions are made. Spine switches serve as high-speed fabric interconnects and do not perform policy enforcement. This distributed enforcement model allows ACI to scale policy decisions across the entire fabric without creating a centralized bottleneck.

Topics

#ACI#leaf switch#policy enforcement#security

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice