How it works...

We can start to see the different components of the ACI fabric starting to merge together now, giving us an understanding of how they all tie in together. A virtual machine (endpoint) can be assigned to an endpoint group, which is tied to an application profile. The endpoint group is associated with a bridge domain, which contains the subnet (or subnets), and in turn, the bridge domain is linked to a VRF instance. The VRF controls our routing, and all of these components go to make up the tenant.

The tenant is, at the moment, very isolated. If we were to add another tenant into the mix, the two would not be able to communicate. We can permit inter-tenant communication by using contracts, which is what we will start setting up next.