Policy requires that the cameras group must not initiate sessions to the finance group on the city EVPN-VXLAN fabric. How does GBP express that intent?
Select an answer to reveal the explanation.
Short Explanation
Least privilege in plain English: camera badges cannot open finance doors. GBP writes that as a group-to-group deny for east-west traffic. Underlay IGP tricks or turning off snooping do not encode that intent.
Full Explanation
Inter-group GBP policies enforce least-privilege east-west rules between classified groups. Denying camera-to-finance initiation is a direct expression of that model. Underlay routing advertisements, DCI VLAN placement alone, or multicast snooping changes do not implement GBP inter-group session policy.