300-620 · Question #147
Refer to the exhibit A Cisco ACI fabric is using out-of-band management connectivity. The APIC must access a routable host with an IP address of 192.168.11.2. Which action accomplishes this goal?
The correct answer is B. Remove the in-band management address from the APIC. For an APIC to access external routable hosts when using out-of-band management, any conflicting in-band management IP configuration must be removed.
Question
Refer to the exhibit A Cisco ACI fabric is using out-of-band management connectivity. The APIC must access a routable host with an IP address of 192.168.11.2. Which action accomplishes this goal?
Exhibit
Options
- AChange the switch APIC Connectivity Preference to in-band management
- BRemove the in-band management address from the APIC.
- CAdd a Fabric Access Policy to allow management connections.
- DModify the Pod Profile to use the default Management Access Policy
How the community answered
(44 responses)- A16% (7)
- B73% (32)
- C7% (3)
- D5% (2)
Why each option
For an APIC to access external routable hosts when using out-of-band management, any conflicting in-band management IP configuration must be removed.
Changing the connectivity preference to in-band management would switch the APIC's management path, which is opposite to the goal of using out-of-band management and resolving an OOB connectivity issue.
When an APIC is configured exclusively for out-of-band management, it should not have an in-band management address configured. The presence of an in-band address can create routing conflicts, causing the APIC to attempt to use the in-band path for external communication, even if out-of-band is intended. Removing the in-band address ensures the APIC correctly uses its OOB interface and routing table to reach external routable hosts.
Fabric Access Policies define how end devices connect to the fabric and are not directly used to configure APIC management access to external hosts.
Modifying the Pod Profile to use a default Management Access Policy is for configuring the fabric's overall management access, not for resolving a specific APIC routing issue when communicating with external hosts via OOB.
Concept tested: Cisco ACI APIC OOB vs In-Band Management Configuration
Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/6x/config/security/cisco-aci-security-configuration-guide-60x/m-configure-oob-management-access.html
Topics
Community Discussion
No community discussion yet for this question.
