Cisco APIC Layer 3 Networking Configuration Guide, Release 6.2(x)

PDF

Cisco APIC Layer 3 Networking Configuration Guide, Release 6.2(x)

Create a VXLAN stretched bridge domain selector

Updated: April 17, 2026

Want to summarize with AI?

Log in

Classify EVPN Type-2 routes received from remote Cisco NX-OS border gateways into an endpoint security group.

Use this procedure to create a VXLAN stretched bridge domain selector that classifies remote endpoints into a specific endpoint security group (ESG).

For a policy-unaware VXLAN EVPN domain, create a VXLAN stretched bridge domain selector to classify EVPN Type-2 routes, which represent endpoints received from remote Cisco NX-OS border gateways, into a specific ESG.

Procedure

  1. On the menu bar, click Tenants and choose the applicable tenant.

  2. In the navigation pane, expand tenant_name > Application Profiles > application_profile_name > Endpoint Security Groups > esg_name > Selectors.

  3. Right-click VXLAN BD Selector and choose Create a VXLAN BD Selector.

  4. In the Create a VXLAN BD Selector dialog box, configure the selector:

    1. From the Bridge Domain drop-down list, choose the stretched bridge domain to map to the ESG.
    2. Optional: In the Description field, enter a description of the selector.
    3. Click Submit.

The VXLAN stretched bridge domain selector classifies EVPN Type-2 routes received from remote Cisco NX-OS border gateways into the specified ESG.