An engineer configures an L3Out in VRF-1 that was configured for Import Route Control Enforcement. The L3Out uses OSPF to peer with a core switch. The L3Out has one external EPG, and it has been confi

When Import Route Control Enforcement is enabled on a VRF, ACI by default does not import any external routes unless explicitly allowed. Setting the scope of the 10.1.0.0/24 subnet to 'Import Route Control Subnet' on the L3Out's external EPG explicitly permits this subnet to be imported into the VRF-1 routing table, making it available for internal routing.

'External Subnet for External EPG' is a scope used for subnets that are learned from the external router and are intended to be advertised externally via the L3Out, not primarily for import into the VRF's routing table under import route control.

'Shared Route for External EPG' is used to make a subnet learned via one L3Out accessible to other VRFs within the ACI fabric, which is not the primary mechanism for importing routes into the local VRF's routing table under route control.

'Export Route Control Subnet' is used to control which subnets are advertised *from* the ACI fabric *to* the external routing peer, not for importing routes into the VRF.