Dynamic classification updates the policy control tag (pcTag) associated with an external endpoint group or endpoint security group when routing information changes.
Dynamic L3Out EPG Classification (DEC) and Dynamic Endpoint Security Group (ESG) Classification dynamically change the pcTag when routing changes occur.
-
Updates pcTags dynamically based on routing changes.
-
Associates external subnets with an external endpoint group (EPG) or ESG by using route maps that match subnets or BGP communities.
-
Gives route map selections precedence over static L3Out subnet configurations.
Feature availability and configuration
The following Cisco APIC releases introduced dynamic classification:
-
Cisco APIC Release 5.2(4): Introduced Dynamic L3Out EPG Classification (DEC), which allows pcTag changes when routing information changes.
-
Cisco APIC Release 6.1(4): Introduced Dynamic ESG Classification, which provides similar functionality by using an ESG instead of an L3Out external EPG.
An external EPG selected by a route map takes precedence over the external EPG subnets configured on the L3Out. For example, if a route map associates 10.1.1.0/24 with external EPG1 and the subnet 10.1.1.0/24 is configured on external EPG2 , the system programs external EPG1 in hardware for 10.1.1.0/24 because the route map selection takes precedence.