AAEP

Location in GUI: Fabric » Access Policies » Policies » Global » Attachable Access Entity Profiles

If infra_vlan is enabled, the infrastructure VLAN ID must be configured under access_policies.

apic:
  access_policies:
    infra_vlan: 10

Diagram

Classes

access_policies (apic)

Name	Type	Constraint	Mandatory	Default Value
aaeps	List	[aaeps]	No

aaeps (apic.access_policies)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	Yes
description	String	Regex: ^[a-zA-Z0-9\\!#$%()*,-./:;@ _{|}~?&+]{1,128}$	No
infra_vlan	Boolean	true, false	No	false
physical_domains	List	String[Regex: ^[a-zA-Z0-9_.:-]{1,64}$]	No
routed_domains	List	String[Regex: ^[a-zA-Z0-9_.:-]{1,64}$]	No
vmware_vmm_domains	List	String[Regex: ^[a-zA-Z0-9_.:-]{1,64}$]	No
endpoint_groups	List	[endpoint_groups]	No
expected_state	Class	[expected_state]	No

endpoint_groups (apic.access_policies.aaeps)

Name	Type	Constraint	Mandatory	Default Value
tenant	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	Yes
application_profile	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	Yes
endpoint_group	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	Yes
vlan	Integer	min: 1, max: 4096	No
primary_vlan	Integer	min: 1, max: 4096	No
secondary_vlan	Integer	min: 1, max: 4096	No
mode	Choice	regular, native, untagged	No	regular
deployment_immediacy	Choice	immediate, lazy	No	lazy

expected_state (apic.access_policies.aaeps)

Name	Type	Constraint	Mandatory	Default Value
minimum_health	Integer	min: 0, max: 100	No
maximum_critical_faults	Integer	min: 0	No
maximum_major_faults	Integer	min: 0	No
maximum_minor_faults	Integer	min: 0	No

Examples

Simple example:

apic:
  access_policies:
    aaeps:
      - name: AAEP1
        physical_domains:
          - PHY1

Full example:

apic:
  access_policies:
    infra_vlan: 10
    aaeps:
      - name: AAEP1
        infra_vlan: true
        physical_domains:
          - PHY1
        routed_domains:
          - ROUTED1
        vmware_vmm_domains:
          - VMM1
        endpoint_groups:
          - tenant: ABC
            application_profile: AP1
            endpoint_group: EPG1
            vlan: 1234
            mode: untagged
            deployment_immediacy: immediate