PDF

Configure a contract preferred group by using the GUI

Updated: April 15, 2026

Want to summarize with AI?

Log in

Enable a contract preferred group in a VRF and include application endpoint groups that require unrestricted communication with one another.

Before you begin

Configure the tenant, VRF, and endpoint groups (EPGs) that will participate in the contract preferred group.

Procedure

  1. On the menu bar, choose Tenants > tenant_name .

  2. In the Navigation pane, expand tenant_name > Networking > VRFs.

  3. Click the VRF in which you want to enable the contract preferred group.

  4. Set Preferred Group to Enabled.

  5. Click Submit.

  6. In the Navigation pane, expand Application Profiles, and then create or expand an application profile associated with the tenant VRF.

  7. Expand Application EPGs, and then click the EPG that you want to include in the contract preferred group.

  8. In the Work pane, choose Policy > General.

  9. Set Preferred Group Member to Include.

  10. Click Submit.

    The EPG is included in the contract preferred group.

What to do next

Include the other EPGs that require unrestricted communication with this EPG. Configure contracts to control communication between preferred group members and EPGs that are excluded from the group.

Note

To support contract preferred group members through Layer 4 through Layer 7 service graphs, create an L4-L7 service EPG policy. For more information, see Create an L4-L7 service EPG policy by using the GUI.