Configuring Intra-EPG Isolation for Cisco ACI Virtual Edge

This procedure shows you how to use the Cisco APIC REST API to configure intra-EPG isolation for Cisco ACI Virtual Edge. This procedure performs the same operation as the GUI procedure of the same name in the Cisco APIC Layer 2 Networking Configuration Guide.

Before you begin

• Make sure that a VXLAN-related configuration is present on the Cisco ACI Virtual Edge VMM domain, particularly a Cisco ACI Virtual Edge fabric-wide multicast address and pool of multicast addresses (one per EPG).

Procedure

To configure intra-EPG isolation, send a POST with XML similar to the following example:

POST https://<apic-ip-address>/api/mo/uni/tn-Tenant2.xml

<fvTenant name="Tenant2">
    <fvAp name="AP-1">
        <fvAEPg name="EPG-61" pcEnfPref="enforced">
            <!-- pcEnfPref="enforced" ENABLES ISOLATION-->
            <!-- pcEnfPref="unenforced" DISABLES ISOLATION-->
            <fvRsBd tnFvBDName="BD-61"/>
            <fvRsDomAtt switchingMode="AVE" encapMode="vxlan" resImedcy="immediate" tDn="uni/vmmp-VMware/dom-D-AVE-SITE-1-XXIII">
            </fvRsDomAtt>
        </fvAEPg>
    </fvAp>
</fvTenant>