Cisco APIC Layer 3 Networking Configuration Guide, Release 6.2(x)

PDF

Cisco APIC Layer 3 Networking Configuration Guide, Release 6.2(x)

Create the Tenant, VRF, and Bridge Domain with IPv6 Neighbor Discovery on the Bridge Domain Using the GUI

Updated: April 17, 2026

Want to summarize with AI?

Log in

Configures a tenant, a VRF, and a bridge domain with IPv6 neighbor discovery interface and prefix policies. This procedure enables the deployment of custom neighbor discovery policies for subnets and interfaces within the APIC environment.

This task shows how to create a tenant, a VRF, and a bridge domain (BD) within which two different types of Neighbor Discovery (ND) policies are created. They are ND interface policy and ND prefix policy. While ND interface policies are deployed under BDs, ND prefix policies are deployed for individual subnets. Each BD can have its own ND interface policy. The ND interface policy is deployed on all IPv6 interfaces by default. In APIC, there is already an ND interface default policy available to use. If desired, you can create a custom ND interface policy to use instead. The ND prefix policy is on a subnet level. Every BD can have multiple subnets, and each subnet can have a different ND prefix policy.

Procedure

  1. On the menu bar, click Tenant > Add Tenant .

  2. In the Create Tenant dialog box, perform the following tasks:

    1. In the Name field, enter a name.
    2. Click the Security Domains + icon to open the Create Security Domain dialog box.
    3. In the Name field, enter a name for the security domain. Click Submit .
    4. In the Create Tenant dialog box, check the check box for the security domain that you created, and click Submit .

  3. In the Navigation pane, expand Tenant-name > Networking .

  4. In the Work pane, drag the VRF icon to the canvas to open the Create VRF dialog box, and perform the following actions:

    1. In the Name field, enter a name.
    2. Click Submit to complete the VRF configuration.

  5. In the Networking area, drag the Bridge Domain icon to the canvas while connecting it to the VRF icon. In the Create Bridge Domain dialog box that displays, perform the following actions:

    1. In the Name field, enter a name.
    2. Click the L3 Configurations tab, and expand Subnets to open the Create Subnet dialog box, enter the subnet mask in the Gateway IP field.

  6. In the Subnet Control field, ensure that the ND RA Prefix check box is checked.

  7. In the ND Prefix policy field drop-down list, click Create ND RA Prefix Policy .

    Note

    There is already a default policy available that will be deployed on all IPv6 interfaces. Alternatively, you can create an ND prefix policy to use as shown in this example. By default, the IPv6 gateway subnets are advertised as ND prefixes in the ND RA messages. A user can choose to not advertise the subnet in ND RA messages by un-checking the ND RA prefix check box.

  8. In the Create ND RA Prefix Policy dialog box, perform the following actions:

    1. In the Name field, enter the name for the prefix policy.
      Note

      For a given subnet there can only be one prefix policy. It is possible for each subnet to have a different prefix policy, although subnets can use a common prefix policy.

    2. In the Controller State field, check the desired check boxes.
    3. In the Valid Prefix Lifetime field, choose the desired value for how long you want the prefix to be valid.
    4. In the Preferred Prefix Lifetime field, choose a desired value. Click OK .
      Note

      An ND prefix policy is created and attached to the specific subnet.

  9. In the ND policy field drop-down list, click Create ND Interface Policy and perform the following tasks:

    1. In the Name field, enter a name for the policy.
    2. Click Submit .

  10. Click OK to complete the bridge domain configuration.

    Similarly you can create additional subnets with different prefix policies as required.

    A subnet with an IPv6 address is created under the BD and an ND prefix policy has been associated with it.