Configuring an L3Out is often the most intimidating part of a Cisco ACI deployment, because a single missing object can make everything look “correct” while nothing actually routes.
In this 15-minute video walkthrough, I’ll show you the full ACI L3Out configuration workflow in APIC, step by step, to connect your ACI fabric to the external networks. We’ll build it end-to-end in the same order you’d use in a real deployment.
Summary
- Step 1: Configure an L3 Domain and Access Policies Used in the L3Out.
- Step 2: Configure the MP-BGP Route Reflectors.
- Step 3: Create the L3Out Object.
- Step 4: Create the L3Out Node and Interface Profiles.
- Step 5: (If Required) Create a Protocol Interface Policy.
- Step 6: Create the External EPG.
- Step 7: Associate the L3Out with the BD.
- Step 8: Set The BD Subnet to Advertise Externally.
- Step 9: Use Contracts between the External and Application EPGs.
Looking for Comprehensive Cisco Data Center Training?
Take your data center skills to the next level with my deep-dive courses, designed for real-world application.
Modern DC Architecture & Automation:
- Cisco Data Centers | ACI Core
- Cisco Data Centers | ACI Automation With Ansible
- Cisco Data Centers | VXLAN EVPN
Core Protocols & CCIE Prep:
Need Personalized Guidance?
Additional Resources: ACI Fabric L3Out White Paper

