Cisco APIC Layer 2 Networking Configuration Guide, Release 6.2(x)

PDF

Cisco APIC Layer 2 Networking Configuration Guide, Release 6.2(x)

Deploy an EPG through an AEP to multiple interfaces using the APIC GUI

Updated: July 7, 2026

Want to summarize with AI?

Log in

Configure an application EPG association with an attachable access entity profile to deploy the EPG over all ports associated with the profile.

You can associate an application EPG with the attachable access entity profile to deploy an EPG over all the ports associated with this attachable access entity profile.

Prior to Cisco APIC 6.1(3), you could associate an application with an attachable access entity profile only through the access policies hierarchy. Starting from Cisco APIC 6.1(3), you can now associate an application with an attachable access entity profile either through the tenant hierarchy or through the access policies hierarchy.

Note

When you create an AEP attachment through either of these specific hierarchies you must also perform any subsequent modification operation only in the hierarchy that it was created in. If there is an overlap in operations, Cisco APIC will reject this configuration.

Before you begin

  • The target application EPG is created.

  • The VLAN pools has been created containing the range of VLANs you wish to use for EPG Deployment on the AEP.

  • The physical domain has been created and linked to the VLAN Pool and AEP.

  • The target attachable access entity profile is created and is associated with the ports on which you want to deploy the application EPG.

Follow these steps to deploy an EPG through an AEP to multiple interfaces using the APIC GUI:

Procedure

  1. You can use either of the following methods to associate an application EPG with an attachable access entity profile:

    1. Open the page for the Application EPG to use. In the GUI, click Tenant > tenant_name > Application Profiles > epg_name > Static AAEP.
    2. In the Static AAEP window, associate the target attachable access entity profile with the application EPG.
    Field Action
    Name

    Select a name for the AEP.
    Encap

    Enter the VLAN ID over which the target application EPG will communicate.
    Primary Encap

    (Optional) If the application EPG requires a primary VLAN, enter the primary VLAN ID.

    Deployment Immediacy

    In the Deployment Immediacy field, accept the default On Demand or choose Immediate.
    Mode

    To specify the mode in which data is transmitted:

    • Trunk -- Select if traffic from the host is tagged with a VLAN ID.

    • Trunk (Native) -- Select if traffic from the host is tagged with an 802.1p tag.

    • Access (Untagged) -- Select if the traffic from the host is untagged.

  2. Alternatively, use this method to associate an application EPG with an attached entity profile.

    1. Open the page for the attachable access entity profile to use. In the GUI, click Fabric > Access Policies > Policies > Global > Attachable Access Entity Profiles.
    2. Click the target attachable access entity profile to open its Attachable Access Entity Profile window.
    3. Click the Show Usage button to view the leaf switches and interfaces associated with this attachable access entity profile.

      The application EPGs associated with this attachable access entity profile is deployed to all the ports on all the switches associated with this attachable access entity profile.

    4. Use the Application EPGs table to associate the target application EPG with this attachable access entity profile. Click + to add an application EPG entry. Each entry contains the following fields:
    Field Action
    Tenant

    Use the drop-down to choose the tenant that contains the target application EPG.
    Application Profile

    Use the drop-down to choose the application profile that contains the target application EPG.
    EPG

    Use the drop-down to choose the target application EPG.
    Encap

    Enter the name of the VLAN (or range of VLANs, separated by commas) to which traffic from this application EPG is assigned.
    Primary Encap

    (Optional) If the application EPG requires a primary VLAN, enter the name of the primary VLAN ID.
    Mode

    Use the drop down to specify the mode in which data is transmitted:

    • Trunk -- Choose if traffic from the host is tagged with a VLAN ID.

    • Trun k(Native) -- Choose if traffic from the host is tagged with an 802.1p tag.

    • Access (Untagged) -- Choose if the traffic from the host is untagged.

  3. Click Submit.

    The application EPGs associated with this attachable access entity profile is deployed to all the ports on all the switches associated with this attachable access entity profile.