300-630 Exam Dumps : Implementing Cisco Application Centric Infrastructure - Advanced (DCACIA)

When traffic to certain endpoints is dropped in a Cisco ACI fabric configured with hardware proxy, setting the L2 Unknown Unicast option to Flood for Layer 2 switched traffic can prevent this problem. This mode allows unknown unicast traffic to be flooded within the bridge domain, rather than being sent to the spine proxy and potentially discarded if the destination is unknown5.

References := Solved: Unknown Unicast in ACI Fabric - Cisco Community

To ensure the Cisco ACI fabric adheres to strict security protocols and only learns endpoints from configured subnets on a bridge domain, the “Enforce Subnet Check” feature must be enabled. This feature restricts endpoint learning to IP addresses belonging to the subnets defined in the bridge domain associated with the endpoint’s VLAN, enhancing security by preventing learning of endpoints from unconfigured subnets. References: Implementing Cisco Application Centric Infrastructure Official Cert Guide

 In Cisco ACI fabric, STP BPDUs are flooded in the bridge domain VLAN. This allows the BPDUs to be propagated throughout the fabric, maintaining the STP topology2.

References := Implementing Cisco Application Centric Infrastructure Official Cert Guide