300-630 Exam Dumps - Cisco CCNP Data Center Questions and Answers

When traffic to certain endpoints is dropped in a Cisco ACI fabric configured with hardware proxy, setting the L2 Unknown Unicast option to Flood for Layer 2 switched traffic can prevent this problem. This mode allows unknown unicast traffic to be flooded within the bridge domain, rather than being sent to the spine proxy and potentially discarded if the destination is unknown5.

References := Solved: Unknown Unicast in ACI Fabric - Cisco Community

 In an Active-Active Across Pods deployment mode, traffic is intelligently redirected to the firewall that currently owns the connection state, allowing for efficient use of network resources. Additionally, the connection state being unsynchronized means that each pod can independently manage its connections without relying on a centralized state, enhancing the resilience and scalability of the network1.

References := (Implementing Cisco Application Centric Infrastructure Official Cert Guide)

In the Cisco ACI fabric, to ensure that the IP address of Server S1 is learned and the IP addresses of BC1 and BC2 are not learned, one must limit IP learning to a specific subnet and suppress ARP responses from BC1 and BC2. By checking the “Limit IP learning to subnet” box (Option A), it ensures that only IPs within a defined subnet are learned, which would include Server S1’s IP but exclude BC1 and BC2 if they are outside of this subnet.Suppressing ARP response on BC1 and BC2 (Option D) prevents these devices from responding to ARP requests, which in turn prevents their IPs from being learned by other devices in the network. References := ( Implementing Cisco Application Centric Infrastructure Official Cert Guide )

 In Cisco ACI, contracts define the policies for communication between EPGs (Endpoint Groups). For a client in WebClient EPG to establish an HTTP connection toward a server in WebServer EPG, the contract must allow the initiation of communication from WebClientto WebServer. Since HTTP uses port 80, the destination port (DST Port) should be set to 80 as per standard HTTP communications. The option “Apply Both Direction DISABLED” means that only the initiator of the connection (in this case, WebClient EPG) can send traffic unless specified otherwise by another contract or filter. The “Reverse Port Filter ENABLED” allows return traffic from WebServer EPG back to WebClient EPG on dynamically allocated source ports used by WebClient when initiating the connection. This combination ensures that clients can initiate an HTTP request and receive responses from servers. References: = Implementing Cisco Application Centric Infrastructure Official Cert Guide

To connect two nonsilient servers in active/standby mode to two ACI leaves, you should implement a virtual PortChannel (vPC) on the ACI leaves. vPC provides high availability and load balancing for server connections.

References := Cisco APIC Layer 2 Networking Configuration Guide, Release 5.2(x)

 In a stretched bridge domain solution between Cisco ACI sites with Layer 2 flood disabled, headend replication is used for broadcast, unknown unicast, and multicast (BUM) traffic between sites. This approach optimizes traffic flow and reduces unnecessary flooding across the network1.

References := Implementing Cisco Application Centric Infrastructure Official Cert Guide

PBR Node Tracking:

Purpose: It is used to monitor the health and availability of endpoints within an Endpoint Group (EPG).

Functionality: When configured, it allows for real-time health checks and traffic redirection based on endpoint status and network conditions.

Benefits: Ensures traffic is directed to healthy endpoints, maintaining application performance and availability.

To enable SSH communication between Web_EPG (Web Endpoint Group) and App_EPG (Application Endpoint Group), it’s necessary to apply a configuration that allows bidirectional communication while not restricting ports based on their directionality. By enabling “Apply Both Directions” and disabling “Reverse Filter Ports,” this ensures that the filter allows SSH packets to flow from Web_EPG to App_EPG and vice versa without any restrictions based on the port’s direction, which is essential for establishing an SSH session. References := ( Implementing Cisco Application Centric Infrastructure Official Cert Guide )

Cisco ACI handles MSTP TCN frames by flushing local endpoints in the affected EPG to prevent stale entries. For MST BPDUs to traverse the ACI fabric, a dedicated EPG for the native VLAN with static bindings is required for MSTP-enabled external switches. References := (Implementing Cisco Application Centric Infrastructure Official Cert Guide)

Configuring the Attachable Entity Profile (AEP) on a physical domain is necessary to ensure server ports can migrate to a different leaf switch in the event of a catastrophic failure. This configuration associates server ports with specific leaf switches and allows for seamless migration of connections without relying on Link Aggregation Control Protocol (LACP), which the server NICs do not support. References := ( Implementing Cisco Application Centric Infrastructure Official Cert Guide )