Summary of the configuration steps

  • have in mind the OOB subnet and the gateway
  • assign the OOB subnet to selected nodes
  • define an OOB contract, with a subject and a default filter. This contract will be used in both directions: provide and consume.
  • set the OOB contract as a provided contract by the default EPG
  • create an external network instance profile
  • set the OOB contract as a consumed contract by the external management network instance profile.

Detailed configuration steps

  • position yourself on tenant mgmt
  • Create a Node Management Address:
  • give it a name next to Policy Name
  • Select Nodes by: choose “specific” then select the nodes that will receive IP addresses
  • under Config select “out-of-band addresses”
  • select the default EPG as the Out-of-band Management EPG
  • define the gateway and subnet that will be used for OOB
  • confirm
  • Position your self under Out-of-Band Contracts. Prior to ACI v4 you click on Security Policies. In ACI v4 you find the OOB Contracts menu under Contracts directly.
  • define a new contract name
  • expand the Subjects by clicking on the plus sign:
  • name the subject:
  • Expand the Filters
  • select the default filter from the drop down list:
  • select the default out-of-band EPG under Node Management EPGs
  • click on it and expand the Provided Out-of-Band Contracts. Select the previously created contract:
  • Create a External Management Network Instance Profile
  • expand Consumed Out-of-Band Contracts and select your same created contract

Additional Ressources on Configuring OOB Management on ACI

  • Configure the OOB for ACI Fabric, prior to v4:

Click here to read the rest of my Cisco ACI study notes.

Categories: Cisco ACI

Keyboard Banger

Keyboard Banger is a network engineer from Africa. He has been working in network support and administration since 2008. He started writing study notes about certification exams and technology topics a couple of years ago. When he's not writing articles, he can be found wandering on technical forums.


Leave a Reply

Your email address will not be published. Required fields are marked *