tenant.l3out.external_epg

The external network instance profile represents a group of external subnets that have the same security behavior. These subnets inherit contract profiles applied to the parent instance profile.

ACI class	l3extInstP
RN	instP-{name}
Cursor	L3outExternalEpgCursor
Parent	tenant.l3out
Atomic	—

Attributes

Accepted as keyword arguments of .external_epg(name) and of .set(**attrs) on this cursor. Enum parameters also accept the plain string.

parameter	wire	type	values	default	description
name (positional)	name	str	—	—	The name of the layer 3 external network instance profile. This name can be up to 64 alphanumeric characters. Note that you cannot change this name after the object has been saved.
description	descr	str	—	—	Specifies the description of a policy component.
contract_exception_tag	exceptionTag	str	—	—	—
flood_on_encap	floodOnEncap	FvFloodOnEncap	disabled, enabled	disabled	Control at EPG level if the traffic L2 Multicast/Broadcast and Link Local Layer should be flooded only on ENCAP or based on bridg-domain settings
provider_label_match_criteria	matchT	VzMatchT	All, AtleastOne, AtmostOne, None	AtleastOne	The provider label match criteria.
policy_control_enforcement	pcEnfPref	FvPcEnfPref	enforced, unenforced	unenforced	Represents parameter used by the node (i.e. Leaf) to enforce filter rules in this EPG
preferred_group_member	prefGrMemb	FvPrefGrMemb	exclude, include	exclude	Represents parameter used to determine if EPg is part of a group that does not a contract for communication
qos_class	prio	QosTenantPrio	level1, level2, level3, level4, level5, level6, unspecified	unspecified	The QoS priority class identifier.
epg_level_dscp	targetDscp	int	—	unspecified	The target differentiated services code point (DSCP) of the path attached to the layer 3 outside profile.

Children

maker	creates	position
.subnet(subnet, **attrs)	l3extSubnet	tenant.l3out.external_epg.subnet
.consumer_contract_label(name, **attrs)	vzConsCtrctLbl	tenant.l3out.external_epg.consumer_contract_label
.provider_contract_label(name, **attrs)	vzProvCtrctLbl	tenant.l3out.external_epg.provider_contract_label
.consumer_label(name, **attrs)	vzConsLbl	tenant.l3out.external_epg.consumer_label
.provider_label(name, **attrs)	vzProvLbl	tenant.l3out.external_epg.provider_label
.consumer_subject_label(name, **attrs)	vzConsSubjLbl	tenant.l3out.external_epg.consumer_subject_label
.provider_subject_label(name, **attrs)	vzProvSubjLbl	tenant.l3out.external_epg.provider_subject_label

Bind aliases

Lazy references, resolved closed-world at push time.

alias	target	flavor	relation
contract_master=	fvEPg (abstract: fvAEPg, fvESg, fvTnlEPg, infraCEPg…)	DN — bind_dn() allowed	fvRsSecInherited
imported_contract=	vzCPIf	name	fvRsConsIf
endpoint_security_group=	fvESg	DN — bind_dn() allowed	fvRsSecInherited
external_epg=	l3extInstP	DN — bind_dn() allowed	fvRsSecInherited
custom_qos_policy=	qosCustomPol	name	fvRsCustQosPol
route_control_profile=	rtctrlProfile	name	l3extRsInstPToProfile
taboo_contract=	vzTaboo	name	fvRsProtBy
in_band_management_epg=	mgmtInB	DN — bind_dn() allowed	fvRsSecInherited
dot1q_tunnel=	fvTnlEPg	DN — bind_dn() allowed	fvRsSecInherited
access_client_epg=	infraCEPg	DN — bind_dn() allowed	fvRsSecInherited
access_function_provider=	infraPEPg	DN — bind_dn() allowed	fvRsSecInherited

Verbs

• .provide(name) → fvRsProv targeting vzBrCP

• .consume(name) → fvRsCons targeting vzBrCP

• .intra_epg(name) → fvRsIntraEpg targeting vzBrCP

APIC diagnostics

States the APIC can flag on this class — it accepts the configuration and reports the inconsistency afterwards.

Config issues

code	meaning
allow-useg-inconsistent	allow useg Validations
bd-id-not-allocated	BD IDs Not Allocated
bd-not-present	BD Validations
context-id-not-allocated	Context IDs Not Allocated
context-not-present	Context Validations
encap-assignment	Encapsulation Not Valid
esg-association-contract-inheritance-present	EPgSelector Contract Inheritance Validations
esg-association-contract-present	EPgSelector Contract Validations
esg-association-contract-taboo-present	EPgSelector Taboo Contract Validations
esg-tag-selector-match-obj-not-associated	ESG TagSelector Duplicate Detected
id-not-allocated	IDs Not Allocated
incorrect-active-standby-uplink-order	Active/Standby Uplink Config Validations
instrimedcy-unsupported	Deployment Immediacy Validation
invalid-rel-to-rtctrlProfile	Invalid Association to Route Control Policy
l3port-and-sub-interface-on-path	L3 Port and Sub-Interface Not Allowed on Same Path
no-conslbl-association	MPLS InstP Validations
not-associated-with-mgmt-zone	Not Associated With Management Zone

Faults

code	condition
F3941	fltL3extInstPNoConsLblAssociation