Switch Virtual Interface (SVI) Auto State

Allows for the SVI auto state behavior to be enabled. This allows the SVI state to be in the down state when all the ports in the VLAN go down.

Tracking service nodes with Policy Based Redirect.

With this release, the Policy Based Redirect feature (PBR) supports tracking service nodes with specific hashing algorithms.

Managing L4-L7 Services

Forwarding Scale Profile Policy

The forwarding scale profile policy enables you to choose between Dual Stack (the default profile) and IPv4 Scale. A forwarding scale profile policy that is set to Dual Stack provides scalability of up to 6K endpoints for IPv6 configurations and up to 12K endpoints for IPv4 configurations. The IPv4 Scale option enables systems with no IPv6 configurations to increase scalability with up to 24K IPv4 endpoints.

The Graceful Insertion and Removal (GIR) mode or maintenance mode allows you to isolate a switch from the network with minimum service disruption.

Q-in-Q Encapsulation Mapping for EPGs

Using Cisco APIC, you can map double-tagged VLAN traffic ingressing on a regular interface, PC, or VPC to an EPG. When this feature is enabled, when double-tagged traffic enters the network for an EPG, both tags are processed individually in the fabric and restored to double-tags when egressing the ACI switch. Ingressing single-tagged and untagged traffic is dropped.

Q-in-Q Encapsulation Mapping for EPGs

First Hop Security

Enables better IPv4 and IPv6 link security and management over the layer 2 links.

Configuring First Hop Security

Latency and PTP

Latency is measured between endpoint groups, which requires all nodes in the fabric to be synchronized using the PTP protocol.

Troubleshooting Using Atomic Counters

Enforced Bridge Domain

The configuration of an enforced bridge domain is supported, in which an endpoint in a subject endpoint group (EPG) can only ping subnet gateways within the associated bridge domain.

With this configuration enabled, you can create a global exception list of IP addresses which can ping any subnet gateway.

Enforced Bridge Domain in Configuring Tenant Policies

Configuring BGP Max Path

Enables you to configure the maximum number of paths that BGP adds to the route table to invoke equal-cost multipath load balancing

Configuring BGP Max Path in Provisioning Layer 3 Outside Connections

AS Path Prepend

Allows for the change to the length of the autonomous system path in a BGP route to invoke best-path selection by a remote peer

AS Path Prepend in Provisioning Layer 3 Outside Connections

Cisco APIC Quota Management

Creates, deletes, and updates a quota management configuration which enables the administrator to limit what managed objects can be added under a given tenant or globally across tenants.

Creating Quota Management in Part 3

Contract Inheritance

To streamline associating contracts to new EPGs, you can now enable an EPG to inherit all the (provided/consumed) contracts associated directly to another EPG in the same tenant. Contract inheritance can be configured for application, microsegmented, L2Out, and L3Out EPGs. Any changes you make to the EPG contract master’s contracts, are received by the inheriting EPG.

See Contract Inheritance in Configuring Tenant Policies in Part 3

802.1Q Tunnels Enhancements

Now you can configure ports on core-switches for use in Dot1q Tunnels for multiple customers. You can also define access VLANs to distinguish between customers consuming the corePorts. You can also disable MAC learning on Dot1q Tunnels.

See 802.1Q Tunnels in Provisioning Layer 2 Networks in Part 3

Reflective relay (802.1Qbg)

Reflective relay (802.1Qbg) transfers switching for virtual machines out of the host server to an external network switch. It provides connectivity between VMs on the same physical server and the rest of the network. It allows policies that you configure on the Cisco APIC to apply to traffic between the VMs on the same server.

See Reflective relay (802.1Qbg)

in Part 3.

Control Plane Policing

Protects the control plane and separates it from the data plane, which ensures network stability, reachability, and packet delivery.

See Configuring Security in Part 3

Encapsulation scope for SVI across Layer 3 Outside networks

With this release you can configure the encapsulation scope for SVI across Layer 3 Outside networks.

See Provisioning Layer 3 Outside Connections in Part 3.

Microsegmentation for virtual switches

Adds content for configuring microsegment EPGs on VMware VDS, Cisco AVS, and Microsoft vSwitch.

See Configuring Microsegmentation on Virtual Switches in Part 3.

Symmetric hashing

Symmetric hashing is now supported

See Creating a Port Channel Policy Using the REST API

Per VRF per node BGP timer values

With this release, you can define and associate BGP timers on a per VRF per node basis.

Provisioning Layer 3 Outside Connections

Layer 3 Out to Layer 3 Out Inter-VRF Leaking

With this release, shared Layer 3 Outs in different VRFs can communicate with each other using a contract.

Provisioning Layer 3 Outside Connections

Multiple BGP communities assigned per route prefix

With this release, multiple BGP communities can now be assigned per route prefix using the BGP protocol.

Entries for set additional communities are reflected in the code example in Managing Layer 3 Networking

Name Change

Name of "Layer 3 EVPN Services for Fabric WAN" changed to "Cisco ACI GOLF"

Cisco ACI GOLF and Multipod in Provisioning Layer 3 Outside Connections

Part 3: Setting Up APIC and the Fabric with the REST API

New section added.

Part 3

Managing Layer 4 to Layer 7 Services

Moved from Part 2 to Part 3

Managing Layer 4 to Layer 7 Services in Setting up APIC and the Fabric with the REST API

802.1Q Tunnels

You can now configure 802.1Q tunnels to enable point-to-multi-point tunneling of Ethernet frames in the fabric, with Quality of Service (QoS) priority settings.

802.1Q Tunnels in Provisioning Layer 2 Networks

APIC Cluster High Availability

Support is added to operate the APICs in a cluster in an Active/Standby mode. In an APIC cluster, the designated active APICs share the load and the designated standby APICs can act as an replacement for any of the APICs in an active cluster.

Managing Cluster High Availability in Managing APIC Clusters

Contract Preferred Groups

Support is added for contract preferred groups that enable greater control of communication between EPGs in a VRF. If most of the EPGs in the VRF should have open communication, but a few should only have limited communication with the other EPGs, you can configure a combination of a contract preferred group and contracts with filters to control communication precisely.

Contract Preferred Groups in Configuring Tenants

Dynamic Breakout Ports

Support is added for connecting a 40 Gigabit Ethernet (GE) leaf switch port to 4-10GE capable (downlink) devices (with Cisco 40-Gigabit to 4X10-Gigabit breakout cables).

Dynamic Breakout Ports in Provisioning Layer 2 Networks

FCoE over FEX Ports

You can now configure FCoE over FEX ports.

Configuring FCoE over FEX Using the REST API in Provisioning Layer 2 Networks

HSRP

Support is added for HSRP, a protocol that provides first-hop routing redundancy for IP hosts on Ethernet networks configured with a default router IP address.

HSRP in Provisioning Layer 3 Outside Connections

NetFlow

Support is added for NetFlow technology, which provides the metering base for a key set of applications, including network traffic accounting, usage-based network billing, network planning, as well as denial of services monitoring, network monitoring, outbound marketing, and data mining for both service providers and enterprise customers.

NetFlow in Provisioning Core Services

The document was created.