300-620 · Question #282
Refer to the exhibit. An engineer must migrate the web servers and backup servers from the legacy network to a Cisco ACI environment in the corresponding EPGs. The requirement is to allow…
The correct answer is D. Set Policy Control Enforcement to Unenforced. To allow communication between EPGs within the same Bridge Domain without creating contracts, the Bridge Domain's Policy Control Enforcement must be set to Unenforced.
Question
Refer to the exhibit. An engineer must migrate the web servers and backup servers from the legacy network to a Cisco ACI environment in the corresponding EPGs. The requirement is to allow communication between the servers in the web EPG and the backup EPG without creating contracts. Which action meets the requirements?
Exhibit
Options
- AConfigure the Enforced Bridge Domain status flag.
- BSet the direction of Policy Enforcement to Egress.
- CSet IP Data-plane learning to Enabled.
- DSet Policy Control Enforcement to Unenforced.
How the community answered
(63 responses)- A2% (1)
- B3% (2)
- D95% (60)
Why each option
To allow communication between EPGs within the same Bridge Domain without creating contracts, the Bridge Domain's Policy Control Enforcement must be set to Unenforced.
Configuring the Enforced Bridge Domain status flag (meaning the BD is enforced) would require contracts for communication between EPGs, which contradicts the requirement to allow communication without contracts.
Setting the direction of Policy Enforcement to Egress determines how contracts are applied (e.g., at the consumer or provider EPG) but does not eliminate the fundamental need for contracts if enforcement is enabled.
Setting IP Data-plane learning to Enabled allows the switch to learn IP addresses from traffic, which is essential for Layer 3 forwarding, but it does not control contract enforcement between EPGs.
Setting the Bridge Domain's 'Policy Control Enforcement' to 'Unenforced' disables contract enforcement for all EPGs associated with that Bridge Domain. This configuration allows any EPGs residing within this Bridge Domain to communicate freely with each other without the need for explicit contracts, fulfilling the requirement.
Concept tested: Cisco ACI Bridge Domain unenforced policy
Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/l2-configuration/cisco-aci-layer2-configuration-guide-501/m-bridge-domains.html
Topics
Community Discussion
No community discussion yet for this question.
