On the menu bar, choose FABRIC > Access Policies. In the Work pane, click Configure an Interface, PC, and VPC.

In the Configure Interface, PC, and VPC dialog box, click the large + icon next to the switch diagram to create a new profile and configure VLANs for the APIC.

In the Switches field, from drop-down list, check the check boxes for the switches to which the APICs are connected.

In the Switch Profile Name field, enter a name for the profile.

Click the + icon to configure the ports.

Verify that in the Interface Type area, the Individual radio button is selected.

In the Interfaces field, enter the ports to which APICs are connected.

In the Interface Selector Name field, enter the name of the port profile.

In the Interface Policy Group field, from drop-down list, choose Create Interface Policy Group.

In the Create Access Port Policy Group dialog box, perform the following actions:

1. In the Name field, enter the name of the policy group.

   You can leave the default values in the rest of the fields as they are.

2. In the Attached Entity Profile field, choose Create Attachable Access Entity Profile.

   This new attach entity profile enables you to specify the VLAN ranges that will be used.

In the Create Attachable Access Entity Profile dialog box, perform the following actions:

1. In the Name field, enter a name.

2. Expand Domains to be Associated to Interfaces field. In the Domain Profile field, from the drop-down list, choose Create Physical Domain.

3. In the Create Physical Domain dialog box, in the Name field, enter the name.

4. In the VLAN Pool field, from the drop-down list, choose Create VLAN Pool.

5. In the Create VLAN Pool dialog box, in the Name field, enter the pool name.

6. In the Allocation Mode area, click the Static Allocation radio button.

7. Expand Encap Blocks. In the Create Ranges dialog box, in the Range fields, add a VLAN range.

8. In the Create VLAN Pool dialog box, click Submit.

9. In the Create Physical Domain dialog box, click Submit.

10. In the Create Attachable Access Entity Profile dialog box, click Update and then Submit.

11. In the Create Access Port Policy Group dialog box, click Submit.

12. In the Configure Interface, PC, and VPC dialog box, click Save.

Expand the Configured Switch Interfaces area to configure the VLANs for the VMM server ports, and perform the following actions:

1. In the Switches drop-down list, check the check boxes for the switches that you want to connect to the APICs.

2. In the Switch Profile Name field, enter a name for the profile.

3. Click the + icon to configure the ports.

4. In the Interface Type area, verify the Individual radio button is selected.

5. In the Interfaces field, enter the ports to which the VMM servers are connected.

6. In the Interface Selector Name field, enter the name of the port profile.

7. In the Interface Policy Group field, from the drop-down list, choose the policy group that was created earlier. Click Save, and click Save again.

8. In the Configure Interface, PC, and VPC dialog box, click Submit.

   The VLAN and the ports to which the APIC and the VMM servers are connected are now configured.

Choose TENANTS > mgmt. In the Navigation pane, expand Tenant mgmt > Networking > Bridge Domains to configure the bridge domain on the in-band connection.

Right-click the in-band bridge domain, click Create Subnet, and perform the following actions:

1. In the Create Subnet dialog box, in the Gateway IP field, enter the in-band management gateway IP address.

2. In the Mask field, enter the subnet mask if it does not self-populate. Click Submit.

   You can leave the default values in the rest of the fields as they are.

On the menu bar, choose TENANTS > mgmt. In the Navigation pane, expand Tenant mgmt > Node Management EPGs, click In-Band EPG - default, and perform the following actions to set the VLAN on the in-band connection:

1. In the Work pane, in the In-Band EPG default area, verify that the default is displayed.

2. In the Encap field, enter the VLAN.

3. Expand Provided Contracts. In the Name field, from the drop-down list, click the default contract radio button to enable EPG to provide the default contract that will be consumed by the EPGs on which the VMM servers are located.

4. Click Update, and click Submit.

5. In the Status dialog box where the Changes Saved Successfully message is displayed, click OK.

On the menu bar, choose TENANTS > mgmt. In the Navigation pane, expand Tenant mgmt > Node Management Addresses, right-click Node Management Addresses, and click Create Static Node Management Addresses.

In the Create Static Node Management Addresses dialog box, perform the following actions:

1. In the Node Range fields enter the range of nodes.

2. In the Config field, click the checkbox for In-Band Addresses.

   The In-Band IP Addresses area is displayed.

3. In the In-Band Management EPG field, from drop-down list, choose the EPG.

4. In the In-Band Starting IP Address field, enter the starting IP address.

5. In the Mask field, enter the net mask.

6. In the In-Band Gateway field, enter the in-band gateway address. Click Submit.

7. In the Confirm dialog box that displays for confirmation that this will assign new management IP addresses to the selected range of nodes., click Yes to proceed.

To verify, in the Navigation pane, expand Node Management Addresses > Static Node Management Addresses, and in the Work pane, view the IP addresses allocated for each node.

Create a VLAN namespace.

<?xml version="1.0" encoding="UTF-8"?>
<!-- api/policymgr/mo/uni.xml -->
<polUni>
  <infraInfra>
    <!-- Static VLAN range -->
    <fvnsVlanInstP name="inband" allocMode="static">
      <fvnsEncapBlk name="encap" from="vlan-10" to="vlan-11"/>
    </fvnsVlanInstP>
  </infraInfra>
</polUni>

Create a physical domain.

<?xml version="1.0" encoding="UTF-8"?>
<!-- api/policymgr/mo/uni.xml -->
<polUni>
  <physDomP name="inband">
    <infraRsVlanNs tDn="uni/infra/vlanns-inband-static"/> 
  </physDomP>
</polUni>

Create selectors for the in-band management.

<?xml version="1.0" encoding="UTF-8"?>
<!-- api/policymgr/mo/.xml -->
<polUni>
  <infraInfra>
    <infraNodeP name="vmmNodes">
      <infraLeafS name="leafS" type="range">
        <infraNodeBlk name="single0" from_="101" to_="101"/>
      </infraLeafS>
      <infraRsAccPortP tDn="uni/infra/accportprof-vmmPorts"/>
    </infraNodeP>

    <!-- Assumption is that VMM host is reachable via eth1/40. -->
    <infraAccPortP name="vmmPorts">
      <infraHPortS name="portS" type="range">
        <infraPortBlk name="block1"
                      fromCard="1" toCard="1"
                      fromPort="40" toPort="40"/>
        <infraRsAccBaseGrp tDn="uni/infra/funcprof/accportgrp-inband" />
      </infraHPortS>
    </infraAccPortP>


    <infraNodeP name="apicConnectedNodes">
      <infraLeafS name="leafS" type="range">
        <infraNodeBlk name="single0" from_="101" to_="102"/>
      </infraLeafS>
      <infraRsAccPortP tDn="uni/infra/accportprof-apicConnectedPorts"/>
    </infraNodeP>

    <!-- Assumption is that APIC is connected to eth1/1. -->
    <infraAccPortP name="apicConnectedPorts">
      <infraHPortS name="portS" type="range">
        <infraPortBlk name="block1"
                      fromCard="1" toCard="1"
                      fromPort="1" toPort="3"/>
        <infraRsAccBaseGrp tDn="uni/infra/funcprof/accportgrp-inband" />
      </infraHPortS>
    </infraAccPortP>

    <infraFuncP>
      <infraAccPortGrp name="inband">
        <infraRsAttEntP tDn="uni/infra/attentp-inband"/>
      </infraAccPortGrp>
    </infraFuncP>

    <infraAttEntityP name="inband">
      <infraRsDomP tDn="uni/phys-inband"/>
    </infraAttEntityP>
  </infraInfra>
</polUni>

Configure an in-band bridge domain and endpoint group (EPG).

<?xml version="1.0" encoding="UTF-8"?>
<!-- api/policymgr/mo/.xml -->
<polUni>
  <fvTenant name="mgmt">
    <!-- Configure the in-band management gateway address on the
         in-band BD. -->
    <fvBD name="inb">
      <fvSubnet ip="<subnet_ip_address>"/>
    </fvBD>

    <mgmtMgmtP name="default">
      <!-- Configure the encap on which APICs will communicate on the
           in-band network. -->
      <mgmtInB name="default" encap="vlan-10">
        <fvRsProv tnVzBrCPName="default"/>
      </mgmtInB>
    </mgmtMgmtP>
  </fvTenant>
</polUni>

Create static in-band management IP addresses and assign them to node IDs.

<polUni>
  <fvTenant name="mgmt">
    <mgmtMgmtP name="default">
      <mgmtInB name="default">
        <mgmtRsInBStNode tDn="topology/pod-1/node-101"
                         addr="<ip_address_1>"
                         gw="<gw_address>”
			 v6Addr = “<ip6_address_1>”
			 v6Gw = “<ip6_gw_address>"/>
        <mgmtRsInBStNode tDn="topology/pod-1/node-102"
                         addr="<ip_address_2>"
                         gw="<gw_address>”
			 v6Addr = “<ip6_address_2>"
			 v6Gw = “<ip6_gw_address>"/>
        <mgmtRsInBStNode tDn="topology/pod-1/node-103"
                         addr="<ip_address_3>"
                         gw="<gw_address>”
			 v6Addr = “<ip6_address_3>"
			 v6Gw = “<ip6_gw_address>"/>
        <mgmtRsInBStNode tDn="topology/pod-1/node-104"
                         addr="<ip_address_4>"
                         gw="<gw_address>”
			 v6Addr = “<ip6_address_4>"
			 v6Gw = “<ip6_gw_address>"/>

        <mgmtRsInBStNode tDn="topology/pod-1/node-105"
                         addr="<ip_address_5>"
                         gw="<gw_address>”
			 v6Addr = “<ip6_address_5>"
			 v6Gw = “<ip6_gw_address>"/>

      </mgmtInB>
    </mgmtMgmtP>
  </fvTenant>
</polUni>

Configure the static in-band management configuration using the NX-OS Style CLI as follows:

apic1(config)# switch 101
apic1(config-switch)# interface inband-mgmt0 
apic1(config-switch-if)# ip address <ip_address_1/mask> gateway <gw_address>

apic1(config)# switch 102
apic1(config-switch)# interface inband-mgmt0 
apic1(config-switch-if)# ip address <ip_address_2/mask> gateway <gw_address>

apic1(config-switch-if)# show inband-mgmt

On the menu bar, choose TENANTS > mgmt. In the Navigation pane, expand Tenant mgmt.

Right-click Node Management Addresses, and click Create Static Node Management Addresses.

In the Create Node Management Addresses dialog box, perform the following actions:

1. In the Node Range field, enter the range of node IDs.

2. In the Config field, check the check box for Out of-Band Addresses.

   Note	The Out-of-Band IP addresses area is displayed.

3. In the Out-of-Band Management EPG field, choose the EPG from the drop-down list.

4. In the Out-of-Band Starting IP Address field, enter the starting IP address.

5. In the Mask field, enter the mask if it is not already assigned.

6. In the Out-of-Band Gateway field, enter the IP address. Click Submit.

To verify, in the Navigation pane, expand Node Management Addresses, and click Static Node Management Addresses.

In the Navigation pane, expand Security Policies > Out-of-Band Contracts.

Right-click Out-of-Band Contracts, and click Create Out-of-Band Contract.

In the Create Out-of-Band Contract dialog box, perform the following tasks:

1. In the Name field, enter a name for the contract (oob-default).

2. Expand Subjects. In the Create Contract Subject dialog box, in the Name field, enter a subject name (oob-default).

3. Expand Filters, and in the Name field, from the drop-down list, choose the name of the filter (default). Click Update, and click OK.

4. In the Create Out-of-Band Contract dialog box, click Submit.

In the Navigation pane, expand Node Management EPGs > Out-of-Band EPG - default.

In the Work pane, expand Provided Out-of-Band Contracts.

In the OOB Contract column, from the drop-down list, choose the out-of-band contract that you created (oob-default). Click Update, and click Submit.

In the Navigation pane, right-click External Network Instance Profile, and click Create External Management Entity Instance.

In the Create External Management Entity Instance dialog box, perform the following actions:

1. In the Name field, enter a name (oob-mgmt-ext).

2. Expand the Consumed Out-of-Band Contracts field. From the Out-of-Band Contract drop-down list, choose the contract that you created (oob-default). Click Update.

   Choose the same contract that was provided by the out-of-band management.

3. In the Subnets field, enter the subnet address. Click Submit.

   Only the subnet addresses you choose here will be used to manage the switches. The subnet addresses that are not included cannot be used to manage the switches.

Create an out-of-band contract.

<polUni>
    <fvTenant name="mgmt">
        <!-- Contract -->
        <vzOOBBrCP name="oob-default">
            <vzSubj name="oob-default">
                <vzRsSubjFiltAtt tnVzFilterName="default" />
            </vzSubj>
        </vzOOBBrCP>
    </fvTenant>
</polUni>
 

Associate the out-of-band contract with an out-of-band EPG.

<polUni>
    <fvTenant name="mgmt">
        <mgmtMgmtP name="default">
            <mgmtOoB name="default">
                <mgmtRsOoBProv tnVzOOBBrCPName="oob-default" />
            </mgmtOoB>
        </mgmtMgmtP>
    </fvTenant>
</polUni>
 

Associate the out-of-band contract with an external management EPG.

<polUni>
    <fvTenant name="mgmt">
        <mgmtExtMgmtEntity name="default">
            <mgmtInstP name="oob-mgmt-ext">
                <mgmtRsOoBCons tnVzOOBBrCPName="oob-default" />
                <!-- SUBNET from where switches are managed -->
                <mgmtSubnet ip="<mgmt_subnet_ip_address>" />
            </mgmtInstP>
        </mgmtExtMgmtEntity>
    </fvTenant>
</polUni>
 

Create static out-of-band management IP addresses and assign them to node IDs.

<polUni>
  <fvTenant name="mgmt">
    <mgmtMgmtP name="default">
      <mgmtOoB name="default">
        <mgmtRsOoBStNode tDn="topology/pod-1/node-101"
                         addr="<ip_address_1>"
                         gw="<gw_address>"/>
        <mgmtRsOoBStNode tDn="topology/pod-1/node-102"
                         addr="<ip_address_2>"
                         gw="<gw_address>"/>
        <mgmtRsOoBStNode tDn="topology/pod-1/node-103"
                         addr="<ip_address_3>"
                         gw="<gw_address>"/>
      </mgmtOoB>
    </mgmtMgmtP>
  </fvTenant>
</polUni>
 

Configure the static out-of-band (OOB) management configuration using the NX-OS Style CLI as follows:

apic1(config)# switch 101
apic1(config-switch)# interface mgmt0 
apic1(config-switch-if)# ip address <ip_address_1/mask> gateway <gw_address>

apic1(config)# switch 102
apic1(config-switch)# interface mgmt0 
apic1(config-switch-if)# ip address <ip_address_2/mask> gateway <gw_address>
apic1(config-switch-if)# show oob-mgmt