Cisco APIC Layer 2 Networking Configuration Guide, Release 6.2(x)

PDF

Cisco APIC Layer 2 Networking Configuration Guide, Release 6.2(x)

Configure Intra-EPG Isolation for Cisco ACI Virtual Edge Using the GUI

Updated: July 7, 2026

Want to summarize with AI?

Log in

Isolates endpoints within an EPG from each other using the Cisco APIC GUI.

Follow this procedure to create an EPG in which the endpoints of the EPG are isolated from each other.

The port that the EPG uses must belong to one of the VM Managers (VMMs).

Note
This procedure assumes that you want to isolate endpoints within an EPG when you create the EPG. If you want to isolate endpoints within an existing EPG, select the EPG in Cisco APIC, and in the Properties pane, in the Intra EPG Isolation area, choose Enforced , and then click SUBMIT .

Before you begin

Make sure that VXLAN-related configuration is present on the Cisco ACI Virtual Edge VMM domain, particularly a Cisco ACI Virtual Edge fabric-wide multicast address and pool of multicast addresses (one per EPG).

Procedure

  1. Log in to Cisco APIC.

  2. Choose Tenants , expand the folder for the tenant, and then expand the Application Profiles folder.

  3. Right-click an application profile, and choose Create Application EPG .

  4. In the Create Application EPG dialog box, complete the following steps:

    1. In the Name field, enter the EPG name.
    2. In the Intra EPG Isolation area, click Enforced.
    3. From the Bridge Domain drop-down list, choose the bridge domain.
    4. Check the Associate to VM Domain Profiles check box.
    5. Click Next.
    6. In the Associate VM Domain Profiles area, complete the following steps:

      • Click the + (plus) icon, and from the Domain Profile drop-down list, choose the desired Cisco ACI Virtual Edge VMM domain.

      • From the Switching Mode drop-down list, choose AVE .

      • From the Encap Mode drop-down list, choose VXLAN or Auto .

        If you choose Auto , make sure that encapsulation mode of the Cisco ACI Virtual Edge VMM domain is VXLAN.

      • (Optional) Choose other configuration options appropriate to your setup.

    7. Click Update and click Finish .

What to do next

You can select statistics and view them to help diagnose problems involving the endpoint. See the sections Choose statistics for isolated endpoints on Cisco ACI Virtual Edge Under the Tenants Tab and View Statistics for Isolated Endpoints on Cisco ACI Virtual Edge Under the Tenants Tab in this guide.