An engineer must implement a new VRF that permits communication between all endpoint groups (EPGs) by default. The new EPGs and bridge domains (BDs) that are created in the new VRF must not require additional configuration to permit traffic between the newly created EPGs or BDs. Which action accomplishes this goal?
To ensure communication between all endpoint groups (EPGs) by default in a new virtual routing and forwarding (VRF) instance without requiring additional configuration, placing all EPGs in the preferred group is the correct solution. The preferred group feature allows EPGs within the same VRF to communicate freely without the need for contracts or other additional configuration. This meets the requirement of having no additional steps needed to permit traffic between the newly created EPGs or bridge domains (BDs).
vzAny contract to VRF or VRF in mode unenforced no?
It is A
C is the correct. It says no more action, then we can not configura a contract.
The correct answer is A. https://sdncore.com/aci-contracts-basics/#:~:text=of%20this%20post.-,contract%20subject%20and%20scope,-The%20contract%20may
the correct answer - A
question is abount implementing a new vrf.
I agree with Minsait.
I hate this kind of questions, since is telling you: Impement a vrf, but with no further action! so, I assume it means, the only action allowed is the creation of the vrf itself... that statement makes option A invalid, I guess
But option A is the accurate answer.
only preferred group does not require additional configuration
A requires no additional configuration on EPG level. There are several different configuration options available to enable open communication amongst many/all EPGs on a Cisco ACI fabric: ● Contract with vzAny: vzAny represents all EPGs, ESGs and external EPGs on a VRF instance. Providing and consuming an open "permit-any" contract on vzAny allows open communication between all endpoints on a VRF instance. ● Preferred Groups – Assigning multiple EPGs to a Preferred Group allows open communication between the EPGs in the Preferred Group, with the restriction that there can only be one Preferred Group per VRF instance. ● Disable security – We do not recommend this option because configuring the VRF instance to "unenforced" mode converts the VRF instance to "permit only," allowing open communication between all endpoints in the VRF instance. Disabling security implicitly disables security contracts and advanced functionality such as service graphs.
The Preferred Group (PG) feature allows you to specify a set of EPGs that are part of the same VRF to allow full communication between them with no need for contracts to be created. https://www.cisco.com/c/en/us/td/docs/dcn/mso/3x/configuration/cisco-aci-multi-site-configuration-guide-301/aci-multi-site-use-case-preferred-group.pdf As the VRF is already created and all EPGs are in same VRF; preferred group will permit communication without the need of additional config
You would need to assign an EPG to a Preffered group so that rules C out.