is organized and the main networking and policy
components.
Figure 9-4 Cisco ACI Tenant Components
The tenant networking objects provide Layer 2 and Layer
3 connectivity between the endpoints and consist of the
following constructs: VRF (virtual routing and
forwarding) instances, bridge domains, subnets, and
external networks. Figure 9-5 displays in more detail
how the tenant networking constructs are organized.
Figure 9-5 Cisco ACI Tenant Networking
Components
VRF instances, also called contexts and private
networks, are isolated routing tables. A VRF instance
defines a Layer 3 address domain. A tenant can contain
one or multiple VRF instances. VRF instances exist on
any leaf switch that has a host assigned to the VRF
instance. All the endpoints within a Layer 3 domain must
have unique IP addresses because traffic can flow
between these devices if allowed by the policy.