Cisco ACI 3.0(1) の新機能

今更ですが、Cisco ACI 3.0(1) のリリースノートを眺めて、個人的に面白そうな機能をメモしてみました。 NetFlow support for Cisco AVS とのことですが、逆に『今まで AVS では NetFlow 非サポート』ということを知らなかったので参考になりました。

No. Feature Description
1 802.1x support IEEE 802.1x is a port-based authentication mechanism to prevent unauthorized devices from gaining access to the network.
2 Enforced Bridge Domain An end point in a subject endpoint group (EPG) can only ping subnet gateways within the associated bridge domain. You can then create a global exception list of IP addresses which can ping any subnet gateway.
3 Intra-EPG contracts Intra-EPG contracts allow some communication and forbid other communication between endpoints in the same EPG. Otherwise, intra-EPG communication is unrestricted by default or barred completely. Intra-EPG contracts can be configured for application EPGs and uSeg EPG) on VMware VDS, Open vSwitch (OVS), and baremetal servers. For information, see the Cisco APIC Basic Configuration Guide.
4 NetFlow support for Cisco AVS NetFlow technology is now supported for Cisco AVS. NetFlow provides the metering base for a key set of applications, including network traffic accounting, usage-based network billing, denial of services monitoring, network monitoring, and data mining. For information, see the Cisco ACI Virtualization Guide.
5 SAML Management and 2 Factor Authentication SAML is an XML-based open standard data format that uses security tokens containing assertions that pass information between an SAML identity provider and a SAML service provider.
6 Local User Authentication using OTP OTP is a one-time password that is valid for only one session. Once OTP is enabled, APIC generates a random human readable 16 binary octets that are base32 OTP Key.
7 Password Strength Allows configuration of user password parameters for security management.

余談ですが、3.0(1) からログイン画面が UCS Director のようになりました! あと、Mode の選択肢が無くなりました…