300-620 DCACI: Implementing Cisco Application Centric Infrastructure

By Cisco · Question Mode

QuestionQ13

ACI Packet Forwarding

An engineer must connect an ESXi host to the Cisco ACI fabric. The host is connected to Leaf 1 and has gateway IP address 10.10.10.254/24 configured within the ACI fabric. A new firewall is connected to Leaf 2 and mapped to the same EPG and BD as the ESXi host. The engineer must move the ESXi host gateway to the firewall. Which configuration set accomplishes this goal?

Explanation

When unicast routing is enabled and a subnet is configured on a Cisco ACI bridge domain, the fabric supplies the default-gateway function. To use the firewall as the gateway instead, the bridge domain must operate as Layer 2 only with unicast routing disabled, and 10.10.10.254/24 must be configured on the firewall. Cisco also recommends leaving unicast routing disabled when endpoints use a gateway other than the bridge-domain SVI.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!