Selector

The video continues with our configuration to extend workload into AWS using ACI Multi-Cloud. We will perform template configuration on NDO and use CNC to translate ACI policy objects into AWS-native constructs: VPC with subnets, route tables with TGW routes for on-prem reachability, and Security Groups that mirror ACI contracts for inbound/outbound traffic enforcement. We will demonstrate how to provide internet access to the AWS environment similarly to having an L3OUT.

The video continues with our configuration to extend workload into AWS using ACI Multi-Cloud. We will perform template configuration on NDO and use CNC to translate ACI policy objects into AWS-native constructs: VPC with subnets, route tables with TGW routes for on-prem reachability, and Security Groups that mirror ACI contracts for inbound/outbound traffic enforcement. We will demonstrate how to provide internet access to the AWS environment similarly to having an L3OUT.

The video continues with our configuration to extend workload into AWS using ACI Multi-Cloud. We will perform template configuration on NDO and use CNC to translate ACI policy objects into AWS-native constructs: VPC with subnets, route tables with TGW routes for on-prem reachability, and Security Groups that mirror ACI contracts for inbound/outbound traffic enforcement. We will demonstrate how to provide internet access to the AWS environment similarly to having an L3OUT.

The video introduces you to a concept of Endpoint Security Group (ESG) in Cisco ACI 6.0. The lab walks through migrating existing EPG endpoints into ESGs using various selector types including EPG selectors, IP tags, MAC tags, and VMM-based attributes like VM name and VM tags. This demonstrates how each selector type affects switching versus routed traffic enforcement. The key takeaway is that ESGs provide a flexible, app-centric security model that supports multi-BD grouping and granular endpoint classification, making them well-suited for greenfield deployments or as a migration path from EPG-based policy.

The video introduces you to a concept of Endpoint Security Group (ESG) in Cisco ACI 6.0. The lab walks through migrating existing EPG endpoints into ESGs using various selector types including EPG selectors, IP tags, MAC tags, and VMM-based attributes like VM name and VM tags. This demonstrates how each selector type affects switching versus routed traffic enforcement. The key takeaway is that ESGs provide a flexible, app-centric security model that supports multi-BD grouping and granular endpoint classification, making them well-suited for greenfield deployments or as a migration path from EPG-based policy.

The video introduces you to a concept of Endpoint Security Group (ESG) in Cisco ACI 6.0. The lab walks through migrating existing EPG endpoints into ESGs using various selector types including EPG selectors, IP tags, MAC tags, and VMM-based attributes like VM name and VM tags. This demonstrates how each selector type affects switching versus routed traffic enforcement. The key takeaway is that ESGs provide a flexible, app-centric security model that supports multi-BD grouping and granular endpoint classification, making them well-suited for greenfield deployments or as a migration path from EPG-based policy.