Where does the subnet address of the distributed gateway need to be configured when route leaking is required?

Question

Options

• Aunder the contract provider EPG
• Bunder the contract consumer EPG
• CIn a shared bridge domain in the tenant common
• DIn the endpoint bridge domain

• A
  3% (2)
• B
  13% (8)
• C
  8% (5)
• D
  75% (45)

Explanation

In Cisco ACI, the distributed (pervasive/anycast) gateway is a Layer 3 construct that belongs to the bridge domain (BD), not the EPG. When route leaking is needed between VRFs, the subnet must be defined at the BD level with the appropriate scope flags (e.g., "Shared between VRFs"), making the endpoint bridge domain the correct configuration point - option D.

Why the distractors are wrong:

• A & B (provider/consumer EPG): EPGs are policy attachment points, not Layer 3 objects. They don't hold subnet or gateway configurations - that responsibility sits one level up at the bridge domain.
• C (shared BD in tenant common): While tenant common is used for truly shared resources across tenants, the distributed gateway subnet for route leaking is configured in the specific bridge domain associated with the endpoints, not a generic shared one.

Memory tip: In ACI, think of the BD as the "virtual SVI" - just like a traditional switch has an SVI (interface vlan X) with an IP address, ACI puts the gateway IP on the bridge domain. Route leaking follows the gateway, so configure it where the gateway lives: the endpoint BD.

No community discussion yet for this question.