EP Loop Protection

Location in GUI: System » System Settings » Endpoint Controls

Diagram

Classes

fabric_policies (apic)

Name	Type	Constraint	Mandatory	Default Value
ep_loop_protection	Class	`[ep_loop_protection]`	No

ep_loop_protection (apic.fabric_policies)

Name	Type	Constraint	Mandatory	Default Value
admin_state	Boolean	`true`, `false`	No	`false`
detection_interval	Integer	min: `30`, max: `300`	No	`60`
detection_multiplier	Integer	min: `1`, max: `255`	No	`4`
action	Choice	`bd-learn-disable`, `port-disable`	No
bd_learn_disable	Boolean	`true`, `false`	No	`true`
port_disable	Boolean	`true`, `false`	No	`false`

Examples

Example-1: This example demonstrates how to enable EP Loop Protection, which detects a loop by observing an endpoint being learned on the same set of two interfaces back and forth. By default, EP Loop Protection is disabled. To enable it, set admin_state to true and optionally override the defaults for detection_interval (default 60 seconds), detection_multiplier (default 4), port_disable (default true), and bd_learn_disable (default false). In this example, EP Loop Protection is enabled with detection_interval set to 180 seconds and detection_multiplier set to 10. Because port_disable is set to True, when a loop is detected, the fabric shuts down one of the interfaces between which the endpoint was moving; Because bd_learn_disable is set to false, the fabric does not disable endpoint learning in the affected bridge domain.

apic:
  fabric_policies:
    ep_loop_protection:
      admin_state: true
      detection_interval: 180
      detection_multiplier: 10
      port_disable: true
      bd_learn_disable: false