Cisco Updated 300-630 Exam Questions and Answers by kyle

When allowing routes learned from one L3Out to be advertised out another L3Out, the Export Route Control Subnet should be enabled, and Aggregate Export should also be enabled. This configuration allows the necessary routes within the specified CIDR block to be aggregated and advertised out, facilitating efficient route advertisement without the need for an explicit list of all routes.

References: Implementing Cisco Application Centric Infrastructure Official Cert Guide

 In a Cisco ACI Multi-Site setup, it’s important to configure the ISN interfaces to handle the encapsulation overhead introduced by the multi-site architecture. Option C is typically the correct choice because it includes:

A subinterface with a specific VLAN ID for traffic segregation.

An increased MTU size to accommodate the extra bytes added by encapsulation.

The correct VRF for inter-site communication.

OSPF configuration for dynamic routing between sites.

References: = Implementing Cisco Application Centric Infrastructure Official Cert Guide

 In Cisco ACI, contracts are used to define the policies that govern communication between End Point Groups (EPGs). A contract specifies which types of traffic are permitted or denied between EPGs. To allow all IP traffic except SSH, you would configure the contract to permit all IP traffic and then deny SSH specifically. This is typically done by defining filters within the contract that match on the SSH protocol and setting the action to deny.

References:

Implementing Cisco Application Centric Infrastructure - Advanced (DCACIA) course materials and official certification guide can provide more detailed information on this topic12.

Cisco’s official documentation and training materials are also a good resource for understanding the configuration and management of contracts in ACI

Within Cisco ACI, when a Topology Change Notification (TCN) BPDU is received in a VLAN, the system flushes the endpoints for the associated encapsulation to ensure network stability. Additionally, BPDU filter and BPDU guard can be configured on Cisco ACI leaf edge ports to protect against potential STP issues2.