A fleet garage needs a temporary construction-trailer subnet restricted on one Edge without rewriting the district-wide centralized policy. Which mechanism fits?
Select an answer to reveal the explanation.
Short Explanation
The trailer is a one-site headache, not a reason to rewrite the whole city’s playbook. Drop a localized ACL on that Edge, keep centralized policy intact, and remove the exception when the trailer leaves. Surgical beats nuclear.
Full Explanation
Localized ACLs provide on-box policy exceptions that apply at a specific Edge without requiring a rewrite of fabric-wide centralized policy. That pattern fits temporary or site-unique constraints such as a construction trailer subnet. Removing centralized policy district-wide, moving user subnets into VPN 0, or disabling OMP are disproportionate and architecturally incorrect responses.