First (as you wrote) you can configure two VIPs - one for first, second for second, connection through RDP at different VIPs (and the same port), or the same VIP and different ports.
Second (better solution):
You are using routed mode (different subnets for client and server side). If you would like to connect directly to server side, you must route this network from client side.
for example: ip route 10.0.0.0/24 192.168.1.x, where 'x' is one CSS's IP. 'x' can be circuit IP, or virtual interface. You can use VIP too, but if rule is not working (service state for all services is 'down') VIP is not 'alive'.
Why do you need native HA: The native HA feature allows two Cisco DCNM
appliances to run as active and standby applications, with their
embedded databases synchronized in real time. Therefore, when the active
DCNM is not functioning, the standby DCNM will...
This document will provide screenshots to outline the steps to setup
TACACS+ configuration to ACI and also the configuration required on
Cisco ACS server. Please find the official Cisco guide for configuring
TACACS+ Authentication to ACI:
Is it supported or NOT supported? It's a frequently asked question.
Before APIC, release 2.3(1f), transit routing was not supported within a
single L3Out profile. In APIC, release 2.3(1f) and later, you can
configure transit routing with a single L3Out pr...