Cisco APIC Layer 3 Networking Configuration Guide, Release 6.2(x)

What's Changed in this guide

Updated: April 17, 2026

Want to summarize with AI?

Describes significant changes and new features introduced in recent releases of the guide. Provides users with a summary of enhancements and documentation locations for quick reference and planning.

This topic summarizes major changes and new features in the guide for each release, including descriptions and documentation references for user awareness and planning.

Feature Changes by Release

Table 1. New Features and Changed Behavior in Cisco APIC Release 6.2(3)
Feature or Change	Description	Where Documented
Bridge Domain–Level Local Proxy ARP for Layer 3 Policy Enforcement	Support for local proxy ARP. Enable local proxy ARP on a bridge domain to force Layer 2 traffic within a subnet to be routed so that the fabric applies security policies based on IP addresses. Local proxy ARP can also be extended to ACI border gateways for one-fabric (VXLAN EVPN) deployments.	ACI Border Gateways
SHA2 support in BGP Neighborship within ACI	This feature introduces support for the SHA-256 algorithm for Border Gateway Protocol (BGP) authentication. It supports for TCP Authentication Option (TCP-AO for BGP peers). Now, administrators can configure BGP neighbors to use SHA-256 for enhanced cryptographic security. It strengthens control plane security by providing a more robust, modern cryptographic alternative to legacy MD5-based authentication.	TCP-AO for BGP
BGP Local ECMP scale increase to 64-way ECMP	This enhancement enables more granular load balancing and increases the effective capacity for transit routing. By allowing up to 64 next-hops when redistributing local routes (such as Static or OSPF) into MP-BGP, this update improves traffic distribution efficiency and fabric scalability in large-scale network designs	BGP Max Path and BGP Local Max ECMP

Table 2. New Features and Changed Behavior in Cisco APIC Release 6.2(2)
Feature or Change	Description	Where Documented
Border Gateway Route Server	Enables the deployment of route servers between fabrics to optimize the BGP overlay control plane, reducing the number of required BGP sessions and minimizing the control-plane route scale footprint.	ACI Border Gateways
Aggregated BUM Storm Control on ACI Border Gateway	You can configure aggregated BUM (Broadcast, Unknown Unicast, and Multicast) storm control on ACI border gateways using a node-level policy (BgwStormCtrlPol). This policy governs all DCI links on the border gateway node and overrides any existing interface-level storm control configurations on DCI ports.	ACI Border Gateways
SR MPLS switch is stamping TTL value of 32 in the MPLS encap packet	The SR MPLS switch would stamp a fixed TTL (Time-to-Live) value of 32 in MPLS-encapsulated packets.This behavior has been updated in Release 6.2(2), the SR MPLS switch now preserves the original IP packet's TTL value and propagates it into the MPLS encapsulation. This change aligns the SR MPLS switch's behavior with standard MPLS TTL processing.	MPLS TTL Handling in SR‑MPLS Handoff Create a SR-MPLS TTL Policy using the GUI Associate the Logical Node Profile with a SR-MPLS TTL Policy
BFD over BGP prefix	This release adds Bidirectional Forwarding Detection (BFD) support for BGP prefix peers on ACI BGP L3Outs. With this enhancement, BFD can now be used with BGP prefix peers so that ACI can scale to environments with thousands of single‑hop eBGP hosts, while still providing rapid link and path failure detection.	Bidirectional Forwarding Detection

Table 3. New Features and Changed Behavior in Cisco APIC Release 6.2(1)
Feature or Change	Description	Where Documented
BGP Graceful Restart Helper mode	The Graceful Restart Helper mode deletes all stale routes after a specified time period, which helps routers to maintain routing stability by retaining their forwarding state while the control plane is being restarted. Graceful Restart is crucial for maintaining network reliability and performance during maintenance activities.	BGP graceful restart helper
Migrate multiple ACI fabrics with existing L3Out connectivity to an ACI border gateway	Interconnect ACI sites using the ACI Border Gateway (BGW) path. This release also adds support for connectivity to VXLAN sites. If your environment already uses ACI multi-site inter connectivity with L3Out, you can migrate to the ACI border gateway interconnect.	ACI Border Gateways

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.