Changelog

Tested versions: link

• APIC: Add support for DCBXP version under LLDP interface policy
• APIC: Add support for IP SLA policy under static route next hop
• APIC: Fix track list default values for percentages and weights
• APIC: Add support for fabric leaf interface selector
• APIC: Add support for fabric leaf interface policy group
• APIC: Add support for fabric spine interface selector
• APIC: Add support for tenant monitoring policies
• APIC: Fix minimum value for web session idle timeout
• APIC: Fix OOB endpoint group to be an optional attribute
• APIC: Fix OSPF metric type for set rules
• APIC: Fix missing values for target DSCP under contract subjects

• APIC: Fix the EIGRP key chain configuration under L3out interface profile

• NDO: Add attribute undeploy_order for NDO to allow controlling ordered undeployment of templates - see guide on how to migrate

Tested versions: link

• Terraform only: Fix handling of errors when merging invalid YAML content
• Terraform only: Fix merging of boolean values, where values of false were not merged consistently

Tested versions: link

• APIC: Add support for L3Out ND interface policy
• APIC: Add support for endpoint MAC and IP tags
• APIC: Add support for interface shutdown
• APIC: Add support for encapsulation under floating L3outs
• APIC: Add support for atomic counter
• APIC: Add support for enhanced log format in syslog configuration
• APIC: Add validation for VMM port group length
• APIC: BREAKING CHANGE: Add support for multiple loopbacks in L3out nodes configuration
• APIC: BREAKING CHANGE: Add support for multiple IPv4 and IPv6 import/export route targets under VRF
• APIC: BREAKING CHANGE: Remove default value for smart licensing URL
• APIC: Fix support for service graphs with copy device
• APIC: Add support for MACsec policy in spine interface policy group
• APIC: BREAKING CHANGE: Only booleans are supported in the data model instead of enabled/disabled, yes/no and on/off
• APIC: Add support for BGP protocol profile name
• APIC: Add support for port bringup delay to link level policies
• BREAKING CHANGE: Terraform: Optimized interface and switch policy groups: empty policies will not be pushed anymore. Empty resources will be removed from existing statefile with no expected impact on fabric
• BREAKING CHANGE: Terraform: Disable escaping HTML characters for all resources that contain passwords
• APIC: Add support for route_maps under L3out to configure multiple route maps. This will deprecate import_route map and export_route_map in the future
• APIC: Enhance SPAN filer group with name being optional attribute
• APIC: BREAKING CHANGE: Enhance BGP best path policy with new attribute ignore_igp_metric. Change control_type attribute to as_path_multipath_relax boolean
• APIC: Add support for endpoint retention policy
• APIC: Add support for unidirectional contracts
• APIC: Add support for rewrite_source_mac under redirect policy
• APIC: Add support for DHCP relay in L3out secondary IP address configuration
• APIC: Change to nac-test and nac-validate
• APIC: Add support for application banners
• APIC: Use Terraform functions to merge YAML content instead of data sources. This will result in merge data source being removed from the statefile
• NDO: Add support for external TEP Pools
• NDO: BREAKING CHANGE: Only booleans are supported in the data model instead of enabled/disabled, yes/no and on/off
• NDO: Enhance contract filter chain with policy_compression attribute
• NDO: BREAKING CHANGE: Remove support for NDO 3.7
• NDO: Add support for NDO 4.3
• NDO: Add support for NDO 4.4
• NDO: Change to nac-test and nac-validate
• NDO: Use Terraform functions to merge YAML content instead of data sources. This will result in merge data source being removed from the statefile

Tested versions: link

• APIC: Fix validation for consumed contracts under external EPG
• APIC: Add support for link local address in L3out interface profiles
• APIC: Enhance static endpoints to not require name
• APIC: Fix for EIGRP route summarization policy to refer to a user tenant
• NDO: Add support for EP move detection mode under BD

Tested versions: link

• APIC: Add support for interface selector description in auto-generated profiles
• APIC: Add support for Netflow Exporter for VMM Networking
• APIC: Add support for EIGRP route summarization
• APIC: Add support to specify different type of a route control map
• APIC: Add description under External EPG Subnet
• APIC: Add support for NDO managed service graph templates and device selection policies
• APIC: Add support for bulk EPG static ports optimization
• APIC: Add support for FEX VPC static port configuration under EPG
• APIC: Add support for global SR MPLS configuration
• APIC: Add support for multicast ARP drop for BD
• APIC: Add support for BGP route summarization at the VRF level
• APIC: Add support for access MACsec Policies
• NDO: Enhance support for site-specific external EPGs
• NDO: Optimize retrieval of schema IDs
• NDO: Add support for FEX VPC static port configuration under EPG
• NDO: Add support for DHCP policies configuration under BD

Tested versions: link

• APIC: Add support for vPC Delay Restore timer
• APIC: Add support for Pod Peering Profile
• APIC: Add support for Fabric Interface Link Level Policies
• APIC: Add support for static vlan allocation under VMware VMM domain
• APIC: Add support for ND interface policy under Bridge Domain
• APIC: Add support for PBR L3 destination name
• APIC: Add support for configuring node role during registration
• APIC: Add support for allow_origins parameter in management access policy
• APIC: Add support for Netflow policies
• APIC: Add support for sub-interfaces in L3out
• APIC: Enhance action support for EP loop protection
• APIC: Add support for MicroBFD in L3out
• APIC: Add support for BGP Route Summarization policies
• APIC: Add description under interface selector, EPG static port, l3out interface profile and static route next hop
• APIC: Add LDAP support in AAA login domains
• APIC: Add support for Private VLANs on static ports
• APIC: Add support for BGP profile in L3out
• APIC: Add support for DHCP Labels under L3out interface profiles
• APIC: Add support for escaping HTML in banners
• APIC: Add support for L4L7 active-active device configuration
• APIC: Fix support for imported devices in service graph templates
• APIC: Add RBAC rules for nodes
• APIC: Add support for MPLS Custom QoS policy in Terraform module
• APIC: Add support for port channel member policies in new interface configuration mode
• APIC: Add support for annotations in NDO-managed objects for tenant, VRF, BD, EPG, L3out and extEPG
• APIC: BREAKING CHANGE: Remove private attribute from subnets under Bridge Domain, EPG, uEPG. Impact only for validation
• NDO: Add support for site-aware policy enforcement mode
• NDO: Add support for site-specific external EPG settings

Tested versions: link

• APIC: Add support for PBR L1L2 destinations
• APIC: Add support for additional AAA security management settings
• APIC: Add support for syslog show timezone
• APIC: Enhance set rules to support external EPG classification
• APIC: Add support for colon character in contract names
• APIC: Add support for all types of storm control attributes
• APIC: Add support for multiple SR/MPLS Infra L3outs
• APIC: BREAKING CHANGE: Add support for multiple match rules to L3out route maps
• APIC: Add support for PTP profiles
• APIC: Add support for vPC component SPAN source
• APIC: Add support for Infra DHCP relay policies
• APIC: Support for descriptions on SNMP policy user and client group
• APIC: Add L3out SVI encapsulation scope
• APIC: Add description to AAEP
• APIC: Add track lists and track members
• APIC: Add auto FEC mode to link level policies
• APIC: Support IP data plane learning at subnet level
• APIC: Align naming standard for fabricNodeBlk objects to what APIC uses
• APIC: Add target version to update groups
• APIC: Make routed domain vlan pool optional
• APIC: BREAKING CHANGE: Add support for multiple ASN entries in AS path prepending
• APIC: Add support for BFD switch policies
• APIC: Add support for uSeg EPGs
• NDO: Add custom_epg_name attribute to EPG VMM domain
• NDI: Enhance nexus-pcv to support recent versions of ND/NDI

Tested versions: link

• APIC: Make L3 PBR destination MAC optional
• APIC: Add apic_include option to port_tracking configuration
• APIC: Add support for Radius Provider
• APIC: Enhance new interface configuration mode to support creating access and fabric policy groups on the created switch profiles
• APIC: Enhance new interface configuration mode to support configuring fabric interfaces
• APIC: Enhance new interface configuration mode to support interface shutdown option
• APIC: Add support for physical_media_type to link level policies
• APIC: Add support for imported L4L7 devices
• APIC: Add support for PIM source and destination filters to bridge domains
• APIC: Add support for DHCP label scope to bridge domains
• APIC: Add support for ND interface policies
• NDO: Add support for NDO 4.2

Tested versions: link

• APIC: Fix replacement of placeholders in auto-generated objects
• APIC: Fix error with sub-port static path bindings
• APIC: Add support for static leafs under an EPG
• APIC: Add auto to allowed values for speed in link level policies
• APIC: Add support for tenant security domains
• APIC: Add support for route tag policies
• APIC: Add support for VRF transit route tag policies
• APIC: Add support for L3out route control enforcement
• APIC: Add support for LDAP login domains
• APIC: Add support for LDAP configuration
• APIC: Add support for BFD multihop node policies
• APIC: Add support for security domains to physical and routed domains
• APIC: Add support for SR MPLS L3outs
• APIC: Add support for configuring mode of L3out SVI interfaces
• APIC: Support additional values for authorization_type attribute of SNMP users
• APIC: Allow : character in name attributes of various access policies objects
• APIC: Add HTTPS TLS v1.3 to management access policies
• APIC: Add SSH AES256-GCM to management access policies
• APIC: Add SSH KEX Algorithms to management access policies
• APIC: Improve handling of quad-dotted notation OSPF area IDs
• APIC: Fix PIM policy compatibility issue with ACI 6.0.x
• APIC: Add support for EPG contract masters
• APIC: Add support for VMware VMM domain security domains
• APIC: Add support for security domains
• APIC: Add support for EIGRP to L3outs
• APIC: Add support for new interface configuration mode
• APIC: Add option to clear remote MAC entries of BDs
• APIC: Add support for ND RA prefix policies
• APIC: Add support for back-2-back Multi-Pod connections
• APIC: Add support for system performance settings
• APIC: Add support for OSPF timer policies
• APIC: Add support for OSPF route summarization
• APIC: Add support for copy services (service graphs)
• APIC: Add support for “direct connect” in service graph templates
• APIC: Add support for OSPF area control
• APIC: Add support for L3out route control profiles
• APIC: Add AAA user management settings
• NDO: Add support for banner (system_config) configuration
• NDO: Add support for remote locations
• NDO: Add support for custom bridge domain MACs
• NDO: Add support for no_default_gateway and primary attributes to endpoint group subnets
• NDO: Switch from mso_schema_site_anp_epg_static_port to mso_schema_site_anp_epg_bulk_staticport resource
• NDO: Add orchestrator_only attribute to tenants
• NDO: Add data_plane_learning and preferred_group attributes to VRFs
• NDO: Add multi_destination_flooding, unknown_ipv4_multicast and unknown_ipv6_multicast attributes to bridge domains
• NDO: Add node_type attribute to service graph
• NDO: Add type attribute to template
• NDO: Add description attribute to template, bridge domain and endpoint group
• NDO: Support optional ordering of template deployment
• NDO: Add support for subport (breakout) EPG static ports