Contracts (ACI-E-CONTRACT)

Course Description

The ACI Elite Series is a series of expert-led, 4-hour deep-dive sessions with hands-on lab practice. We cover different topics each week, so you can choose the ones that apply to you at a time that works for you. 

This session provides a deep dive into ACI Contracts.

LEARNING OBJECTIVES

• Explain how ACI uses contracts to allow for secured communication between endpoints

LECTURE

• Contract Scope
• Subjects
• Filters
  • Directives (Log and Policy Compression)
• Verifying L2 and L3 permit and denies from the GUI
• Subject Labels
  • Apply both ways and reverse filter ports
• EPG Labels
• Deny Contracts
  • Taboo Contracts
  • Regular contracts with Deny Filter
• VRF Enforced and Unenforced
• Preferred Group
• VZ_ANY
• Consumed contract interfaces (Intro to leaking)

LABS

• Enable EPG to EPG commuications using Subject Labels and EPG Labels
• Enable EPG to EPG communication using Preferred Group and VZ_Any VRF options
• Block specific traffic using Taboo contracts and deny filters

Click here to view the entire series

Course Information

Length: 0.5 day

Format: Lecture and Lab

Delivery Method: Virtual

Max. Capacity: 16

Who Should Attend

This class will provide value for anyone deploying or operating an ACI fabric, no prior ACI knowledge needed. This particular topic will be more relevant for Architects or Engineers doing design work.