300-620 · Question #273
An engineer configures port-12 on Leaf-101 and Leaf-102 to connect to a new server called SVR- 12. This server will belong to a new EPG-12 and needs to use Encapsulation VLAN-12. An already existing s
The correct answer is B. Enable port local VLAN scope.. To allow two different EPGs to use the same VLAN encapsulation on the same physical port, you must configure port local VLAN scope.
Question
Options
- AAssociate EPG-12 to the same BD as EPG-10.
- BEnable port local VLAN scope.
- CDisable native VLAN on both EPGs.
- DAssign the IP address of SVR-12 to a different subnet.
How the community answered
(21 responses)- A5% (1)
- B81% (17)
- C5% (1)
- D10% (2)
Why each option
To allow two different EPGs to use the same VLAN encapsulation on the same physical port, you must configure port local VLAN scope.
Associating EPG-12 to the same BD as EPG-10 would place both EPGs in the same broadcast domain, violating the intent of having two distinct EPGs with potentially different policies.
Enabling port local VLAN scope allows the same VLAN ID to be reused across different EPGs on the same physical port or port channel, each mapping to a different bridge domain and EPG. This is necessary when multiple EPGs share the same physical access port but require distinct isolation and policies, despite using the same VLAN tag on the wire.
Disabling native VLAN on both EPGs is irrelevant to the problem of reusing a VLAN ID across different EPGs on the same port, as native VLAN applies to untagged traffic.
Assigning SVR-12 to a different subnet is a Layer 3 consideration and does not address the Layer 2 encapsulation and EPG association conflict on the shared physical port.
Concept tested: ACI Port Local VLAN Scope
Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/config/layer2/cisco-aci-layer2-configuration-guide-501/m-creating-an-access-port-selector-on-a-leaf-switch.html
Topics
Community Discussion
No community discussion yet for this question.