Contracts (ACI-E-CONTRACT)

Course Description

ACI Elite Series Contracts (ACI-E-CONTRACT)

The ACI Elite Series is a series of expert-led, 4-hour deep-dive sessions with hands-on lab practice. We cover different topics each week, so you can choose the ones that apply to you at a time that works for you. 

This session provides a deep dive into ACI Elite Series Contracts (ACI-E-CONTRACT).

Learning Objective

• Explain how ACI uses contracts to allow for secured communication between endpoints

Lecture

• Contract Scope
• Subjects
• Filters
  • Directives (Log and Policy Compression)
• Verifying L2 and L3 permit and denies from the GUI
• Subject Labels
  • Apply both ways and reverse filter ports
• EPG Labels
• Deny Contracts
  • Taboo Contracts
  • Regular contracts with Deny Filter
• VRF Enforced and Unenforced
• Preferred Group
• VZ_ANY
• Consumed contract interfaces (Intro to leaking)

Labs

• Enable EPG to EPG commuications using Subject Labels and EPG Labels
• Enable EPG to EPG communication using Preferred Group and VZ_Any VRF options
• Block specific traffic using Taboo contracts and deny filters

For more information on the entire ACI Elite Series, click here.

Course Information

Length: 0.5 day

Format: Lecture and Lab

Delivery Method: Virtual

Max. Capacity: 16

Related Training

• Advanced Troubleshooting (ACI-E-ADVTSHOOT)
• External Connectivity Part 1 (ACI-E-CONNECT1)
• Deployment Models and DevOps (ACI-E-DEPDEV)
• Design and Migration Considerations (ACI-E-DESIGN)
• ACI Fabric Configuration Part 2 (ACI-E-FABCON2)
• Fabric Forwarding (ACI-E-FABFOR)
• ACI Logical Constructs Part 1 (ACI-E-LOGIC1)
• ACI Logical Constructs Part 2 (ACI-E-LOGIC2)
• Multi-Site and Multi-Pod Part 1 (ACI-E-MSITE1)
• Multi-Site and Multi-Pod Part 2 (ACI-E-MSITE2)
• ACI Overview (ACI-E-OVER)

Who Should Attend

This class will provide value for anyone deploying or operating an ACI fabric, no prior ACI knowledge needed. This particular topic will be more relevant for Architects or Engineers doing design work.