nerdexam
Cisco

300-620 · Question #273

An engineer configures port-12 on Leaf-101 and Leaf-102 to connect to a new server called SVR- 12. This server will belong to a new EPG-12 and needs to use Encapsulation VLAN-12. An already existing s

The correct answer is B. Enable port local VLAN scope.. To allow two different EPGs to use the same VLAN encapsulation on the same physical port, you must configure port local VLAN scope.

ACI Fabric Infrastructure

Question

An engineer configures port-12 on Leaf-101 and Leaf-102 to connect to a new server called SVR- 12. This server will belong to a new EPG-12 and needs to use Encapsulation VLAN-12. An already existing server, which is named SVR-10, is also connected to the same leaf switches. SVR-10 belongs to EPG-10 and also uses Encapsulation VLAN-12. Which step must the engineer take to configure connectivity for SVR-12 and EPG-12?

Options

  • AAssociate EPG-12 to the same BD as EPG-10.
  • BEnable port local VLAN scope.
  • CDisable native VLAN on both EPGs.
  • DAssign the IP address of SVR-12 to a different subnet.

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    81% (17)
  • C
    5% (1)
  • D
    10% (2)

Why each option

To allow two different EPGs to use the same VLAN encapsulation on the same physical port, you must configure port local VLAN scope.

AAssociate EPG-12 to the same BD as EPG-10.

Associating EPG-12 to the same BD as EPG-10 would place both EPGs in the same broadcast domain, violating the intent of having two distinct EPGs with potentially different policies.

BEnable port local VLAN scope.Correct

Enabling port local VLAN scope allows the same VLAN ID to be reused across different EPGs on the same physical port or port channel, each mapping to a different bridge domain and EPG. This is necessary when multiple EPGs share the same physical access port but require distinct isolation and policies, despite using the same VLAN tag on the wire.

CDisable native VLAN on both EPGs.

Disabling native VLAN on both EPGs is irrelevant to the problem of reusing a VLAN ID across different EPGs on the same port, as native VLAN applies to untagged traffic.

DAssign the IP address of SVR-12 to a different subnet.

Assigning SVR-12 to a different subnet is a Layer 3 consideration and does not address the Layer 2 encapsulation and EPG association conflict on the shared physical port.

Concept tested: ACI Port Local VLAN Scope

Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/config/layer2/cisco-aci-layer2-configuration-guide-501/m-creating-an-access-port-selector-on-a-leaf-switch.html

Topics

#EPG#VLAN encapsulation#port local VLAN scope#bare metal server

Community Discussion

No community discussion yet for this question.

Full 300-620 Practice