300-635 · Question #29
What must be configured to allow SNMP traffic on ACI switches?
The correct answer is A. an out-of-band contract. In Cisco ACI, SNMP traffic to fabric switches uses the out-of-band (OOB) management network, and ACI's policy model requires an OOB contract to explicitly permit that traffic between the external management network and the switch's OOB EPG - without it, SNMP polling is silently…
Question
Options
- Aan out-of-band contract
- Ban out-of-band management interface
- CSNMP relay Policy
- Dan out-of-band bridge domain
How the community answered
(40 responses)- A73% (29)
- B8% (3)
- C15% (6)
- D5% (2)
Explanation
In Cisco ACI, SNMP traffic to fabric switches uses the out-of-band (OOB) management network, and ACI's policy model requires an OOB contract to explicitly permit that traffic between the external management network and the switch's OOB EPG - without it, SNMP polling is silently dropped.
Why the distractors are wrong:
- B (OOB management interface): The OOB interface is a prerequisite (you need the interface configured), but it alone does not allow SNMP traffic - the contract is still required to permit communication.
- C (SNMP relay policy): This doesn't exist as a standalone ACI construct; SNMP doesn't need relay configuration the way DHCP does.
- D (OOB bridge domain): ACI's OOB management uses a node management EPG, not a bridge domain - bridge domains belong to in-band constructs.
Memory tip: Think of ACI's zero-trust model - nothing is allowed without a contract. Even management traffic on the OOB network needs a contract to flow, so whenever a question asks "what allows [protocol] to reach ACI switches via management," the answer involves a contract.
Topics
Community Discussion
No community discussion yet for this question.