The CSS will forward the client "SYN" packet directly to the server on any layer 3 or 4 rule. If it is a layer 5 rule, then the CSS must wait until it sees the HTTP header to make a load balancing decision.
If you have a layer 4 and 5 rule for the same IP address and port (or possibly layer 3 rule with same IP) then the CSS must wait until the layer 5 information even it it hits the layer 3 or 4 rule (we dont know if it hits the layer 4 rule until after we know if it hits the layer 5 rule first)
This document will provide screenshots to outline the steps to setup
TACACS+ configuration to ACI and also the configuration required on
Cisco ACS server. Please find the official Cisco guide for configuring
TACACS+ Authentication to ACI:
Is it supported or NOT supported? It's a frequently asked question.
Before APIC, release 2.3(1f), transit routing was not supported within a
single L3Out profile. In APIC, release 2.3(1f) and later, you can
configure transit routing with a single L3Out pr...
Cisco Documents are usually accurate, but when it came to the document
on Cisco APIC Signature-Based Transactions it was slightly off the mark.
This document is for those novices to API like me who cant seem to
figure out how to go about performing signat...