WEBVTT

1
00:00:03.250 --> 00:00:11.250
Open ACI Fabrics from the lab canvas and select the workbench for this fabric.

2
00:00:12.650 --> 00:00:20.150
In Fabric, check the controller, spine, and leaf switches against the lab topology.

3
00:00:48.500 --> 00:00:56.500
Create the tenant, the routing instance, the bridge domain, and the two endpoint groups.

4
00:01:05.450 --> 00:01:13.950
In Visore, query the tenant class, then open the new tenant by its distinguished name.

5
00:02:21.050 --> 00:02:30.050
Set up the access policy, then bind each endpoint group to its leaf port and VLAN.

6
00:02:51.200 --> 00:02:58.700
Correct the out-of-range VLAN to clear the path fault shown in the dashboard.

7
00:03:30.050 --> 00:03:36.550
With no contract between these endpoint groups, the ping is blocked.

8
00:03:47.500 --> 00:03:53.000
Create a contract with a filter for ICMP traffic.

9
00:04:06.750 --> 00:04:12.750
Apply the contract between the provider and consumer endpoint groups.

10
00:04:21.300 --> 00:04:29.300
Repeat the ping in both directions to verify that the contract permits the traffic.

11
00:04:39.050 --> 00:04:46.050
Remove the consumer binding and verify that the ping is blocked again.

12
00:05:10.050 --> 00:05:16.550
Reapply the contract and check that pings succeed in both directions.

13
00:05:22.400 --> 00:05:31.400
The REST client can query the existing tenants and add a new one by distinguished name.

14
00:05:31.550 --> 00:05:39.050
A mismatched distinguished name is rejected, and the tenant list stays the same.

15
00:05:47.850 --> 00:05:54.850
Reopen the lab and verify that the saved policy still permits traffic.