nerdexam
Cisco

300-620 · Question #282

Refer to the exhibit. An engineer must migrate the web servers and backup servers from the legacy network to a Cisco ACI environment in the corresponding EPGs. The requirement is to allow…

The correct answer is D. Set Policy Control Enforcement to Unenforced. To allow communication between EPGs within the same Bridge Domain without creating contracts, the Bridge Domain's Policy Control Enforcement must be set to Unenforced.

ACI Fabric Infrastructure

Question

Refer to the exhibit. An engineer must migrate the web servers and backup servers from the legacy network to a Cisco ACI environment in the corresponding EPGs. The requirement is to allow communication between the servers in the web EPG and the backup EPG without creating contracts. Which action meets the requirements?

Exhibit

300-620 question #282 exhibit

Options

  • AConfigure the Enforced Bridge Domain status flag.
  • BSet the direction of Policy Enforcement to Egress.
  • CSet IP Data-plane learning to Enabled.
  • DSet Policy Control Enforcement to Unenforced.

How the community answered

(63 responses)
  • A
    2% (1)
  • B
    3% (2)
  • D
    95% (60)

Why each option

To allow communication between EPGs within the same Bridge Domain without creating contracts, the Bridge Domain's Policy Control Enforcement must be set to Unenforced.

AConfigure the Enforced Bridge Domain status flag.

Configuring the Enforced Bridge Domain status flag (meaning the BD is enforced) would require contracts for communication between EPGs, which contradicts the requirement to allow communication without contracts.

BSet the direction of Policy Enforcement to Egress.

Setting the direction of Policy Enforcement to Egress determines how contracts are applied (e.g., at the consumer or provider EPG) but does not eliminate the fundamental need for contracts if enforcement is enabled.

CSet IP Data-plane learning to Enabled.

Setting IP Data-plane learning to Enabled allows the switch to learn IP addresses from traffic, which is essential for Layer 3 forwarding, but it does not control contract enforcement between EPGs.

DSet Policy Control Enforcement to Unenforced.Correct

Setting the Bridge Domain's 'Policy Control Enforcement' to 'Unenforced' disables contract enforcement for all EPGs associated with that Bridge Domain. This configuration allows any EPGs residing within this Bridge Domain to communicate freely with each other without the need for explicit contracts, fulfilling the requirement.

Concept tested: Cisco ACI Bridge Domain unenforced policy

Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/l2-configuration/cisco-aci-layer2-configuration-guide-501/m-bridge-domains.html

Topics

#EPG communication#contract-less communication#policy enforcement#Bridge Domain

Community Discussion

No community discussion yet for this question.

Full 300-620 Practice