PDF

IP address-based microsegmented EPG as a shared resource

Updated: April 15, 2026

Want to summarize with AI?

Log in

An IP address-based microsegmented EPG can provide a shared resource that devices in its native VRF and other VRFs can access.

An IP address-based microsegmented endpoint group (EPG) can operate as a shared resource across VRF boundaries.

  • The existing microsegmented EPG contains a subnet with a unicast IP address.

  • The subnet is advertised and shared with devices in VRFs other than its native VRF.

  • An IP attribute associates the EPG with the IP address of the shared subnet.

Shared microsegmented EPG configuration requirements

To use an IP address-based microsegmented EPG as a shared resource, meet the following requirements:

  1. Configure a subnet with a unicast IP address in an existing IP address-based microsegmented EPG.

  2. Enable the subnet for advertisement and sharing with devices in VRFs other than its native VRF.

  3. Configure an IP attribute with the appropriate option enabled to associate the EPG with the IP address of the shared subnet.

Configure an IP address-based microsegmented EPG as a shared resource by using the GUI

You can configure an IP address-based microsegmented EPG with a /32 subnet as a shared resource. The shared resource can be advertised outside the fabric and accessed from other VRFs.

Before you begin

Configure an IP address-based microsegmented EPG with a /32 subnet mask.

Note

Procedure

  1. Navigate to the IP address-based uSeg EPG.

    1. In the Cisco APIC GUI, choose Tenants > tenant_name > uSeg EPGs > uSeg_epg_name .

      The Properties pane for the uSeg EPG appears.

  2. Configure an IP attribute that matches the shared EPG subnet address.

    1. In the uSeg Attributes table, click +, and then choose IP Address Filter.

      The Create IP Attribute dialog appears.

    2. In the Name field, enter a name for the IP attribute.
    3. Check the Use FV Subnet check box.

      This option indicates that the IP attribute value matches the IP address of a shared subnet.

    4. Click Submit.

  3. Create a shared subnet for the uSeg EPG.

    1. In the Navigation pane, expand the IP address-based uSeg EPG, right-click Subnets, and choose Create EPG Subnets.
    2. In the Default Gateway field, enter the IP address of the microsegmented EPG with a /32 subnet mask.
      Note

      • The subnet mask must be /32.

      • For an IP address-based EPG, this value is the IP address of the shared EPG subnet, not a default gateway address.

    3. Check the Treat as a virtual IP address check box.
    4. Under Scope, check Advertised Externally and Shared between VRFs.
    5. Click Submit.

Remove shared-resource configuration from an IP address-based microsegmented EPG by using the GUI

Before you begin

Identify the following configuration before you remove the shared-resource configuration:

  • The subnet configured as the shared-resource address for the IP address-based microsegmented EPG.

  • The IP attribute for which Use FV Subnet is enabled.

To stop using an IP address-based microsegmented EPG as a shared resource, delete the shared subnet and configure its IP attribute to stop using that subnet.

Procedure

  1. Delete the shared subnet from the IP address-based microsegmented EPG.

    1. In the Cisco APIC GUI, choose Tenants > tenant_name > Application Profiles > application_profile_name > uSeg EPGs > uSeg_epg_name .
    2. In the Navigation pane, expand the IP address-based uSeg EPG, and then click Subnets.
    3. In the Subnets pane, select the subnet that is advertised externally and shared between VRFs, and then choose Actions > Delete.
    4. Click Yes to confirm the deletion.

  2. Disable Use FV Subnet for the associated IP attribute.

    1. In the Navigation pane, click the name of the IP address-based uSeg EPG.

      The Properties pane for the uSeg EPG appears.

    2. In the uSeg Attributes table, locate the IP attribute for which Use FV Subnet is enabled.
    3. Double-click the IP attribute.

      The Edit IP Attribute dialog appears.

    4. Uncheck the Use FV Subnet check box.
    5. In the IP Address field, enter another IP address attribute.
      Note

      The address must be a unicast address with a /32 subnet mask, such as 124.124.124.123/32.

    6. Click Submit.