At which layer in the ACI fabric are policies enforced?
A. endpoint
B. spine
C. APIC
D. leaf
Which layer in the ACI fabric are policies enforced?
At which layer in the ACI fabric are policies enforced?
A. endpoint
B. spine
C. APIC
D. leaf
Definitely Leaf.
Multicast and external router subnets always result in a hit on the ingress leaf switch. Security policy enforcement occurs as soon as the destination EPG is known by the ingress leaf switch.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI-Fundamentals_chapter_010010.html#concept_609AB01DA5074B26B1A6FB72620CAB3C
Agree, Leaf
Leaf