Creating management contracts

The final contract we are going to create is one in the mgmt tenant. This one will allow SNMP traffic between the APIC and the SNMP software, which we will be setting up in Chapter 8, Monitoring ACI.

How to do it...

1. Create a filter (snmp-contract) in the mgmt tenant (Tenants | mgmt | Security Policies | Filters).
2. Create two entries, permitting UDP ports 161 and 162.

3. Right-click on Out-Of-Band Contracts and select Create Out-Of-Band Contract.

 

 

4. Name the contract (OOB-SNMP), and click on the plus sign next to Subjects. Select the snmp-contract created previously.

5. Click on UPDATE.
6. Click on OK.
7. Click on SUBMIT.

How it works...

This is an out-of-band contract, which we will be needing later on in the book. Earlier versions of the ACI software did not require this contract, but newer ones do. The contract permits traffic to the UDP ports used by SNMP and for SNMP trap notifications.