October 21, 2024

Updated General Scalability L4-L7 Devices topic to 1,200 physical or virtual devices and Layer 4 to Layer 7 topic by changing configurable options to add "concrete devices."

October 8, 2024

Updated High Dual Stack profile values in Fabric Topology section.

August 19, 2024

Updated "Per Fabric Scale" values of the IP SLA probes in the Fabric Topology section.

June 26, 2024

Updated Fabric Topology content with updated scale guidelines for the number of Consumers and Providers for the same contract and Number of VLAN encapsulations per EPG.

February 2, 2023

Updated "Number of EIGRP neighbors" scale.

July 18, 2022

First release of this document.

Number of APIC nodes

3

4

5 or 6

7

Number of leaf switches

85

200

300

500

Number of leaf switches per Pod

85

200

200

400

Number of tier-2 leaf switches per Pod in Multi-Tier topology

80

100

125

125

Number of Pods

6

6

25

25

Number of spine switches in a Multi-Pod fabric

24

24

50

50

Number of tenants

1,000

1,000

3,000

3,000

Number of Layer 3 (L3) contexts (VRFs)

1,000

1,000

3,000

3,000

Number of spine switches per Pod

6

Number of FEXs

650

(maximum of 20 FEXs and 576 ports per leaf)

Number of contracts

10,000

Number of contract filters

10,000

Number of endpoint groups (EPGs)

15,000

(21,000 for L2 fabric)

Number of EPGs per tenant

General limits:

• Single-tenant fabrics: 4,000

• Multi-tenant fabrics: 500

Or one of the following two specific use cases within the same fabric (the EPGs must be deployed on local leaf switches only, not on remote leaf switches):

• Use case 1:

  • Up to 10 tenants that have up to 700 EPGs per tenant, with the EPGs distributed across up to 100 leaf switches

• Use case 2:

  • 1 tenant with up to 1,400 EPGs deployed on up to 100 leaf switches

    For example, tenant1 with EPG1-1400 on leaf1-100

  • 1 tenant with up to 800 EPGs deployed on a different set of up to 20 leaf switches

    For example, tenant2 with EPG1401-2200 on leaf101-120

  • 2 tenants with up to 800 EPGs per tenant deployed on a different set of up 20 leaf switches

    For example, tenant3 with EPG2201-3000 and tenant4 with EPG 3001-3800 on leaf121-140

Number of bridge domains (BDs)

15,000

(21,000 for L2 fabric)

Number of vCenters

200 VDS

Number of Service Chains

1,000

Number of L4-L7 concrete devices

1,200 physical or virtual devices (1,200 maximum in total per fabric)

Number of ESXi hosts - VDS

3,200

Number of VMs

Depends on server scale

Number of configuration zones per fabric

30

L3 EVPN services over fabric WAN - GOLF (with and without OpFlex)

1,000 VRFs

60,000 routes in a fabric

Number of Routes in Overlay-1 VRF

1,000

Floating L3Out

6 anchor nodes

32 non-anchor nodes

Number of fabrics that can be a stretched fabric

3

Number of Route Reflectors

6

Number of Pods

25

Number of leaf switches per Pod

400

Number of leaf switches overall

500

Number of Route Reflectors for L3Out

50

Number of External Route Reflectors between Pods

• For 1-3 Pods: Up to 3 external route reflectors

  We recommend full mesh for external BGP peers instead of using external route reflectors when possible

• For 4 or more Pods: Up to 4 external route reflectors

  We recommend using external route reflectors instead of full mesh

  We recommend that the external route reflectors are distributed across Pods so that in case of any failure there are always at least two Pods with external route reflectors still reachable

Number of PCs, vPCs

320 (with FEX HIF)

N/A

Number of encapsulations per access port, PC, vPC (non-FEX HIF)

3,000

N/A

Number of encapsulations per FEX HIF, PC, vPC

100

N/A

Number of encapsulations per FEX

1,400

N/A

Number of member links per PC, vPC*

*vPC total ports = 32, 16 per leaf

16

N/A

Number of ports x VLANs (global scope and no FEX HIF)

64,000

168,000 (when using legacy BD mode)

N/A

Number of ports x VLANs (FEX HIFs and/or local scope)

10,000

N/A

Number of static port bindings

60,000

700,000

(200,000 per tenant)

Number of VMACs

510

N/A

STP

All VLANs

N/A

Mis-Cabling Protocol (MCP)

256 VLANs per interface

2,000 logical ports (port x VLAN) per leaf

N/A

Number of endpoints (EPs)

Default profile or High LPM profile:

• MAC: 24,000

• IPv4: 24,000

• IPv6: 12,000

IPv4 scale profile:

• MAC: 48,000

• IPv4: 48,000

• IPv6: Not supported

High Dual Stack scale profile:

• LSE:

  • MAC: 64,000

  • IPv4: 64,000

  • IPv6: 24,000

• LSE2:

  • MAC: 64,000

  • IPv4: 64,000

  • IPv6: 48,000

16-slot and 8-slot modular spine switches:

Max. 450,000 Proxy Database Entries in the fabric, which can be translated into any one of these:

• 450,000 MAC-only EPs (each EP with one MAC only)

• 225,000 IPv4 EPs (each EP with one MAC and one IPv4)

• 150,000 dual-stack EPs (each EP with one MAC, one IPv4, and one IPv6)

The formula to calculate in mixed mode is:

#MAC + #IPv4 + #IPv6 <= 450,000

NOTE: Four fabric modules are required on all spines in the fabric to support above scale.

4-slot modular spine switches:

Max. 360,000 Proxy Database Entries in the fabric, which can be translated into any one of these:

• 360,000 MAC-only EPs (each EP with one MAC only)

• 180,000 IPv4 EPs (each EP with one MAC and one IPv4)

• 120,000 dual-stack EPs (each EP with one MAC, one IPv4, and one IPv6)

The formula to calculate in mixed mode is:

#MAC + #IPv4 + #IPv6 <= 360,000

NOTE: Four fabric modules are required on all spines in the fabric to support above scale.

Number of endpoints (EPs)

(Continued)

High Policy profile:

• LSE2 (except FXP switches):

  • MAC: 24,000

  • IPv4: 24,000

  • IPv6: 12,000

• LSE:

  • MAC: 16,000

  • IPv4: 16,000

  • IPv6: 8,000

High IPv4 EP Scale profile:

• LSE: Not supported

• LSE2 (with 32GB of RAM):

  • MAC: 24,000

  • IPv4 local: 24,000

  • IPv4 total: 280,000

  • IPv6: 12,000

Multicast Heavy profile:

• LSE: Not supported

• LSE2 (except FXP switches):

  • MAC: 24,000

  • IPv4 local: 24,000

  • IPv4 total: 64,000

  • IPv6: 4,000

Fixed spine switches:

Max. 180,000 Proxy Database Entries in the fabric, which can be translated into any one of these:

• 180,000 MAC-only EPs (each EP with one MAC only)

• 90,000 IPv4 EPs (each EP with one MAC and one IPv4)

• 60,000 dual-stack EPs (each EP with one MAC, one IPv4, and one IPv6)

The formula to calculate in mixed mode is:

#MAC + #IPv4 + #IPv6 <= 180,000

Number of Multicast Routes

Default (Dual Stack), IPv4 Scale, High LPM, High Policy or High IPv4 EP scale profiles: 8,000 with (S,G) scale not exceeding 4,000

High Dual Stack profile:

• LSE: 512

• LSE2: 32,000 with (S,G) scale not exceeding 16,000

Multicast Heavy profile:

• LSE: not supported

• LSE2 (with 32GB of RAM): 90,000 with (S,G) scale not exceeding 72,000

128,000

Number of Multicast Routes per VRF

Default (Dual Stack), IPv4 Scale, High LPM, High Policy or High IPv4 EP scale profiles: 8000 with (S,G) scale not exceeding 4000

High Dual Stack profile:

• LSE: 512

• LSE2: 32,000 with (S,G) scale not exceeding 16,000

Multicast Heavy profile:

• LSE: not supported

• LSE2 (except FXP switches): 32,000

32,000

IGMP snooping L2 multicast routes

• For IGMPv2, route scale is for (*, G) only

• For IGMPv3, route scale is for both (S, G) and (*, G)

Default (Dual Stack), IPv4, High LPM, High Policy, or High IPv4 EP scale profiles: 8,000

High Dual Stack profile:

• LSE: 512

• LSE2: 32,000

Multicast Heavy profile:

• LSE: not supported

• LSE2: 32,000

32,000

Multicast Listener Discovery (MLD) snooping to IPv6 L2 multicast routes. There are three multicast scale profiles.

Maximum 2000 ipv6 MLD snooping joins supported

Maximum 2000 ipv6 MLD snooping joins supported

Number of IPs per MAC

4,096

4,096

Number of Host-Based Routing Advertisements

30,000 host routes per border leaf

N/A

SPAN

32 unidirectional or 16 bidirectional sessions (fabric, access, or tenant)

N/A

Number of ports per SPAN session

63 – total number of unique ports (fabric + access) across all types of span sessions

N/A

Number of source EPGs in tenant SPAN sessions

E + P + E*P + EPP + v6FePP + 0.5*v4FePP <= 230

• 230 bidirectional

• 460 unidirectional (230 ingress + 230 egress)

N/A

Number of VLAN encapsulations per EPG

If EPG has 3 VLAN encapsulations = 3 entries

If EPG has 3 VLAN encapsulations = 3 entries

Number of SPAN ACL filter TCAM entries

SPAN filters are not supported in:

• Fabric ports

• Fabric and tenant SPAN sessions

• Spine switches

• IPv4: 480

• IPv6: 240

Total number of TCAM entries is calculated using this formula:

(IPv4-filters) * (IPv4-filter-source-groups) + 2 * (IPv6-filters) * (IPv6-filter-source-groups) + 2 * (no-filter-source-groups)

N/A

Number of L4 Port Ranges

16 (8 source and 8 destination )

First 16 port ranges consume a TCAM entry per range.

Each additional port range beyond the first 16 consumes a TCAM entry per port in the port range.

Filters with distinct source port range and destination port range count as 2 port ranges.

You cannot add more than 16 port ranges at once.

N/A

Common pervasive gateway

256 virtual IPs per Bridge Domain

N/A

Number of Data Plane policers at the interface level

• 7 ingress policers

• 3 egress policers

N/A

Number of Data Plane policers at EPG and interface level

128 ingress policers

N/A

Number of interfaces with Per-Protocol Per-Interface (PPPI) CoPP

63

N/A

Number of TCAM entries for Per-Protocol Per-Interface (PPPI) CoPP

256

One PPPI CoPP configuration may use more than one TCAM entry. The number of TCAM entries used for each configuration varies in each protocol and leaf platform. Use vsh_lc -c 'show system internal aclqos pppi copp tcam-usage' command to check on LSE/LSE2 platforms

N/A

Number of SNMP trap receivers

10

10

IP SLA probes*

100

• 1500 (for PBR tracking)

• 400 (for static route tracking)

First Hop Security (FHS)*

With any combination of BDs/EPGs/EPs within the supported limit

2,000 endpoints

1000 bridge domains

N/A

Number of Q-in-Q tunnels

(both QinQ core and edge combined)

1,980

N/A

Number of TEP-to-TEP atomic counters

(tracked by 'dbgAcPathA' object)

N/A

1,600

EVPN sessions

4

100

BGP labeled unicast (LU) pairs

16

200

ECMP paths

16

N/A

Infra SR-MPLS L3Outs*

* Including both, remote leaf and multi-pod

N/A

100 total, 2 per RL location

VRFs*

* Including both, remote leaf and multi-pod

N/A

1,200

External EPGs

N/A

2,000 total, 100 per VRF

Interfaces

N/A

Same as fabric scale

Multi-pod remote leaf pairs

N/A

50 pairs (100 RLs total)

Contexts (VRFs) per tenant

Number of Contexts (VRFs)

3,000

Maximum ECMP (equal cost multipath) for BGP best path

64

N/A

Maximum ECMP (equal cost multipath) for OSPF best path

64

N/A

Maximum ECMP (equal cost multipath) for Static Route best path

64

N/A

Number of isolated EPGs

400

400

Border Leafs per L3 Out

N/A

12

Number of vzAny Provided Contracts

Shared services: Not supported

Non-shared services: 70 per Context (VRF)

N/A

Number of vzAny Consumed Contracts

Shared services: 16 per Context (VRF)

Non-shared services: 70 per Context (VRF)

N/A

Number of Graphs Instances per device cluster

N/A

500

L3 Out per context (VRF)

N/A

400

Number of BFD neighbors

• Up to 256 sessions using these minimum BFD timers:

  • minTx:50

  • minRx:50

  • multiplier:3

• 257-2000 sessions using these minimum BFD timers:

  • minTx:300

  • minRx:300

  • multiplier:3

N/A

Number of BGP neighbors

2,000 with up to 70,000 external prefixes with a single path

20,000

Number of OSPF neighbors

• Up to 700 with up to 10,000 external prefixes using these timers:

  • Hello timer of 10 seconds

  • Dead timer of 40 seconds

  • No more than 300 OSPF neighbors per VRF

• 701-2,000 with up to 35,000 external prefixe using these timers:

  • Hello timer of 40 seconds

  • Dead timer of 160 seconds

  • No more than 300 OSPF neighbors per VRF

12,000

Number of EIGRP neighbors

32

N/A

Number of subnets for Route Summarization

1,000

N/A

Number of static routes to a single SVI/VRF

5,000

N/A

Number of static routes on a single leaf switch

10,000

N/A

Number of IP Longest Prefix Matches (LPM) entries

Default (Dual Stack) profile:

• IPv4: 20,000 or

• IPv6: 10,000

• IPv6 wide prefixes (>= /84): 1,000

  NOTE: For LSE2 and FX2 models there's no restriction on wide prefixes.

IPv4 scale profile:

• IPv4: 38,000

• IPv6: Not supported

High Dual Stack scale profile:

• IPv4: 38,000 or

• IPv6: 19,000

• IPv6 wide prefixes (>= /84): 1,000

  NOTE: For LSE2 and FX2 models there's no restriction on wide prefixes.

Number of IP Longest Prefix Matches (LPM) entries

(Continued)

High LPM Scale profile:

• IPv4: 128,000 or

• IPv6: 64,000

• IPv6 wide prefixes (>= /84): 1,000

  NOTE: For LSE2 and FX2 models there's no restriction on wide prefixes.

High Policy profile:

• LSE2 (except FXP switches):

  • IPv4: 20,000 or

  • IPv6: 10,000

• LSE:

  • IPv4: 8,000

  • IPv6: 4,000

High IPv4 EP Scale profile:

• LSE2 (except FXP switches):

  • IPv4: 40,000

  • IPv6: 20,000

• LSE: Not supported

Multicast Heavy profile:

• LSE2 (except FXP switches):

  • IPv4: 20,000

  • IPv6: 10,000

• LSE: Not supported

N/A

Average number of paths (ECMP) per prefix at maximum LPM scale

Across all prefixes, the average number of equal cost next-hops (ECMP) must not exceed the specified number. Some prefixes may have a higher number of paths as long as it's compensated by other prefixes that have a lower number of paths.

Default (Dual Stack), High Policy and Multicast Heavy profiles:

• IPv4: 32

• IPv6: 12

IPv4 scale profile:

• IPv4: 16

• IPv6: NA

High Dual Stack scale profile:

• IPv4: 16

• IPv6: 6

High LPM scale profile:

• IPv4: 4

• IPv6: 1

N/A

Number of Secondary addresses per logical interface

1

1

Number of L3 interfaces per Context

• 1,000 SVIs

• 48 Routed interfaces

• 100 sub-interfaces with or without port-channel

N/A

Number of L3 interfaces

• 1,000 SVIs

• 48 Routed interfaces

• 1,000 sub-interfaces with or without port-channel

N/A

Number of ARP entries for L3 Outs

7,500

N/A

Shared L3 Out

• IPv4 Prefixes: 2,000 or

• IPv6 Prefixes: 1,000

• IPv4 Prefixes: 6,000 or

• IPv6 Prefixes: 3,000

Number of L3 Outs

800

2,400 (single-stack)

1,800 (dual-stack)

Number of External EPGs

800

4,000

The listed scale is calculated as a product of (Number of external EPGs)*(Number of border leaf switches for the L3Out)

For example, this combination adds up to a total of 2,000 external EPGs in the fabric (250 external EPGs * 2 border leaf switches * 4 L3Outs):

• 250 External EPGs in L3Out1 on leaf1 and leaf2

• 250 External EPGs in L3Out2 on leaf1 and leaf2.

• 250 External EPGs in L3Out3 on leaf3 and leaf4

• 250 External EPGs in L3Out4 on leaf3 and leaf4

Number of External EPGs per L3Out

250

600

The listed scale is calculated as a product of (Number of external EPGs per L3Out)*(Number of border leaf switches for the L3Out)

For examples, 150 external EPGs on L3Out1 that is deployed on leaf1, leaf2, leaf3, and leaf4 adds up to a total of 600

Number of LPM Prefixes for External EPG Classification

Refer to LPM scale section.

N/A

Number of host prefixes for External EPG Classification

Default Profile:

• IPv4 (/32): 16,000

• IPv6 (/128): 12,000

  Combined number of host prefixes and endpoints can't exceed 12,000.

IPv4 Scale profile:

• IPv4 (/32): 16,000

  Combined number of host prefixes, multicast groups, and endpoints can't exceed 56,000.

• IPv6 (/128): 0

N/A

Number of host prefixes for External EPG Classification

(Continued)

High Dual Stack Profile:

• LSE:

  • IPv4 (/32): 64,000

    Combined number of host prefixes, multicast groups, and endpoints can't exceed 64,000.

  • IPv6 (/128): 24,000

    Combined number of host prefixes and endpoints can't exceed 24,000.

• LSE2:

  • IPv4 (/32): 64,000

    Combined number of host prefixes, multicast groups, and endpoints can't exceed 64,000.

  • IPv6 (/128): 48,000

    Combined number of host prefixes and endpoints can't exceed 48,000.

High LPM Profile:

• IPv4 (/32): 24,000

  Combined number of host prefixes, multicast groups, and endpoints can't exceed 24,000.

• IPv6 (/128): 12,000

  Combined number of host prefixes and endpoints can't exceed 12,000.

N/A

Number of host prefixes for External EPG Classification

(Continued)

High Policy profile:

• LSE:

  • IPv4 (/32): 16,000

    Combined number of host prefixes, multicast groups, and endpoints can't exceed 24,000

  • IPv6 (/128): 8,000

    Combined number of host prefixes and endpoints can't exceed 8,000.

• LSE2 (except FXP switches):

  • IPv4 (/32): 16,000

  • IPv6 (/128): 12,000

    Combined number of host prefixes and endpoints can't exceed 12,000.

N/A

Number of host prefixes for External EPG Classification

(Continued)

High IPv4 EP Scale profile:

• LSE: Not supported

• LSE2 (except FXP switches):

  • IPv4 (/32): 16,000

  • IPv6 (/128): 12,000

    Combined number of host prefixes and endpoints can't exceed 12,000.

Multicast Heavy profile:

• LSE: Not supported

• LSE2 (except FXP switches):

  • IPv4 (/32): 16,000

    Combined number of host prefixes, multicast groups, and endpoints can't exceed 154,000.

  • IPv6 (/128): 4,000

    Combined number of host prefixes and endpoints can't exceed 4,000.

N/A

Number of BDs

1,980

Legacy mode: 3,500

15,000

Number of BDs with Unicast Routing per Context (VRF)

1,000

1,750

Number of subnets per BD

1,000, cannot be for all BDs.

1,000 per BD

Number of EPGs per BD

3,960

4,000

BD with Flood in Encapsulation: maximum number of replications (= EPG VLANs * ports)

The sum of all EPG VLANs * ports (i.e. VLAN “replications”) for all EPG in a given BD with Flood in Encapsulation enabled must be less than 1500

N/A

Number of L2 Outs per BD

1

1

Number of BDs with Custom MAC Address

1,000

1,000

Number of EPGs + L3 Outs per Multicast Group

128

128

Number of BDs with L3 Multicast enabled

1,750

1,750

Number of VRFs with L3 Multicast enabled

64

300

Number of L3 Outs per BD

16

N/A

Number of static routes behind pervasive BD (EP reachability)

N/A

450

DHCP relay addresses per BD across all labels

16

N/A

DHCP Relay: maximum number of replications (= EPG VLANs * ports)

The maximum number of VLAN encapsulations * ports in a BD with DHCP relay enabled should be less than 1,500

N/A

ICMPv6 ND: maximum number of replications (= EPG VLANs * ports)

The maximum number of VLAN encapsulations * ports in a BD should be less than 1,500

N/A

Number of external EPGs per L2 out

1

1

Number of PIM Neighbors

1,000

1,000

Number of PIM Neighbors per VRF

64

64

Number of L3Out physical interfaces with PIM enabled

32

N/A

Number of EPGs

Normally 3,960; if legacy mode 3,500

15,000

Maximum amount of encapsulations per EPG

1 Static leaf binding, plus 10 Dynamic VMM

N/A

Maximum Path encap binding per EPG

Equals to number of ports on the leaf

N/A

EPGs with Flood in Encapsulation: maximum number of replications (= EPG VLANs * ports)

The sum of all EPG VLANs * ports (i.e. VLAN “replications”) for all EPG with Flood in Encapsulation enabled in a given BD must be less than 1,500

N/A

Maximum amount of encapsulations per EPG per port with static binding

One (path or leaf binding)

N/A

Number of domains (physical, L2, L3)

100

N/A

Number of VMM domains

N/A

200 VDS

Number of native encapsulations

• One per port, if a VLAN is used as a native VLAN.

• Total number of ports, if there is a different native VLAN per port.

Applicable to each leaf independently

Number of 802.1p encapsulations

• 1, if path binding then equals the number of ports.

• If there is a different native VLAN per port, then it equals the number of ports.

Applicable to each leaf independently

Can encapsulation be tagged and untagged?

No

N/A

Number of Static endpoints per EPG

Maximum endpoints

N/A

Number of Subnets for inter-context access per tenant

4000

N/A

Number of Taboo Contracts per EPG

2

N/A

IP-based EPG (bare metal)

4,000

N/A

MAC-based EPG (bare metal)

4,000

N/A

Security TCAM size

Default scale profile: 64,000

IPv4 scale profile: 64,000

High Dual Stack scale profile:

• LSE: 8,000

• LSE2: 128,000

High LPM scale profile: 8,000

High Policy profile:

• LSE: 100,000

• LSE2 (with 24GB of RAM): 140,000

• LSE2 (with 32GB of RAM): 256,000

High IPv4 EP Scale profile:

• LSE: Not supported

• LSE2 (except FXP switches): 64,000

Multicast Heavy profile:

• LSE: Not supported

• LSE2 (except FXP switches): 64,000

N/A

Software policy scale with Policy Table Compression enabled

(Number of actrlRule Managed Objects)

Dual stack profile: 80,000 (except EX switches)

High Dual Stack profile:

• LSE: Not supported

• LSE2: 140,000

High Policy profile:

• LSE (except EX switches): 100,000

• LSE2 (with 24GB of RAM) : 140,000

• LSE2 (with 32GB of RAM) : 256,000

N/A

Approximate TCAM calculator given contracts and their use by EPGs

Number of entries in a contract X Number of Consumer EPGs X Number of Provider EPGs X 2

N/A

Number of consumers (or providers) of a contract that has more than 1 provider (or consumer)

100

100

Number of consumers (or providers) of a contract that has a single provider (or consumer)

1,000

1,000

Scale guideline for the number of Consumers and Providers for the same contract

N/A

Number of consumer EPGs * number of provider EPGs * number of filters in the contract <= 50,000

This scale limit is per contract.

If the limit is exceeded, the configuration is rejected.

If 90% of the limit is reached, fault returns.

Number of rules for consumer/provider relationships with in-band EPG

400

N/A

Number of rules for consumer/provider relationships with out-of-band EPG

400

N/A

Number of ESGs per Fabric

10,000

Number of ESGs per VRF

4,000

Number of ESGs per Tenant

4,000

Number of L2 MAC Selectors per Leaf

5,000

Number of L3 IP Selectors per Leaf

5,000

Number of VSANs

32

Number of VFCs configured on physical ports and FEX ports

151

Number of VFCs on port-channel (PC), including SAN port-channel

7

Number of VFCs on virtual port-channel (vPC) interfaces, including FEX HIF vPC

151

Number of FDISC per port

255

Number of FDISC per leaf

1,000

Number of FC NP Uplink interfaces

48

Number of VSANs

32

Number of FDISC per port

255

Number of FDISC per leaf

1,000

Number of SAN port-channel, including VFC port-channel

7

Number of members in a SAN port-channel

16

Number of vCenters (VDS)

N/A

200 (Verified with a load of 10 events/minute for each vCenter)

Datacenters in a vCenter

N/A

15

Total Number of VMM domain (vCenter, Datacenter) instances.

N/A

200 VDS

Number of EPGs per vCenter/vDS

N/A

5,000

Number of EPGs to VMware domains/vDS

N/A

5,000

Number of endpoints per VDS

10,000

10,000

Number of endpoints per vCenter

10,000

10,000

Support RBAC for VDS

N/A

Yes

Support RBAC for Cisco ACI Virtual Edge

N/A

Yes

Number of Microsegment EPGs with vDS

400

N/A

Number of VM Attribute Tags per vCenter

N/A

vCenter version 6.0: 500

vCenter version 6.5: 1,000

Number of L4-L7 concrete devices

1,200

Number of graph instances

1,000

Number of device clusters per tenant

30

Number of interfaces per device cluster

Any

Number of graph instances per device cluster

500

Deployment scenario for ASA (transparent or routed)

Yes

Deployment scenario for Citrix - One arm with SNAT/etc.

Yes

Deployment scenario for F5 - One arm with SNAT/etc.

Yes

Number of ACS/AD/LDAP authorization domains

4 tested (16 maximum /server type)

Number of login domains

15

Number of security domains/APIC

15

Number of security domains in which the tenant resides

4

Number of priorities

4 (16 per domain)

Number of shell profiles that can be returned.

4 (32 domains total)

Number of users

8,000 local / 8,000 remote

Number of simultaneous logins

500 connections / NGNIX simultaneous REST logins

Number of UCSMs per APIC cluster

12

Number of VMM Domains per UCSM

4

Number of VLANs + PVLAN per UCSM

4,000

Number of vNIC Templates per UCSM

16

Custom QoS Policy with DSCP

7

Custom QoS Policy with DSCP and Dot1P

7

Custom QoS Policy with Dot1P

38

Custom QoS Policy via a Contract

38

Number of leaf switches connected to a single spine with PTP globally enabled

288

40

N/A

Number of PTP peers per leaf switch

52

26

25

Number of ACI switches connected to the same tier-1 leaf switch (multi-tier topology) with PTP globally enabled

Within the range of the "Number of PTP peers per leaf switch" above

16

N/A

Number of access ports with PTP enabled on a leaf switch

Within the range of the "Number of PTP peers per leaf switch" above

25

24

Number of PTP peers per access port

PTP Mode Multicast (Dynamic/Master): 2 peers

PTP Mode Unicast Master: 1 peer

PTP Mode Multicast (Dynamic/Master): 2 peers

PTP Mode Unicast Master: 1 peer

1