How Does Cisco ACI Detect a Moved Silent Host's IP Address?

Answer Correct answer: C — Cisco ACI detects a silent host that moved by ARP flooding in the bridge domain, so the flooded ARP request reaches the host's new leaf.

How does Cisco ACI detect the IP address of a silent host that moved from one location to another without notifying a Cisco ACI leaf?

  1. Silent hosts are detected by the ACI fabric.
  2. Endpoint announce messages are sent to COOP.
  3. ARP requests are flooded in the bridge domain. Correct Answer
  4. Bounce entries are installed on the leaf switch.

Community Votes

C
83%
D
17%

83% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The question tests silent host detection in ACI: only ARP flooding in the bridge domain forces a non-communicating host to answer from its new leaf, while the classic trap is confusing the bounce entry (a consequence of a detected move) with the detection mechanism itself.

Cisco ACI detects a silent host that moved without notifying a leaf by flooding ARP requests inside the bridge domain, because the flooded request reaches the host at its new location. This page confirms option C and explains why bounce entries and COOP announces only follow a move that has already been learned.

Picking D — bounce entries are installed on the original leaf after the move has already been detected through COOP; they redirect traffic toward the new location but never probe for or discover a silent host that has not yet sent any traffic.

Community Discussion (4 comments)

prospio971 👍 1 Selected: C
It is C: In a Cisco ACI fabric, when a silent host moves from one location to another without notifying the ACI leaf switch (e.g., via Gratuitous ARP), the detection mechanism depends on how the bridge domain is configured. Specifically, ARP flooding can help detect such silent hosts.
udo2020 👍 1 Selected: D
I think it is D. https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html
Rollizo 👍 2 Selected: C
it is C. Bounce doesn't fix the silent hosts.
mdriraa 👍 2 Selected: C
The difference of enabling and disabling the ARP flooding option appears once ACI learns a silent host IP. One of the benefits of enabling ARP flooding is to be able to detect a silent IP that moved from one location to another without notifying an ACI leaf. Because the ARP request is flooded within the BD, even if the ACI leaf still thinks the IP is at the old location, the host with the silent IP would respond appropriately so that the ACI leaf can update its entry accordingly. If ARP flooding is disabled, the ACI leaf would keep forwarding the ARP request only to the old location until the IP endpoint ages out. On the other hand, the benefit of disabling ARP flooding is to be able to optimize traffic flow by sending the ARP request directly to the location of the target IP, assuming no endpoint moves without notifying its movement via GARP and such. https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

A silent host sends no traffic and no gratuitous ARP, so after it physically moves the original leaf keeps a stale endpoint entry pointing at the old port. When ARP flooding is enabled on the bridge domain, an ARP request for that IP is flooded across the BD instead of being proxy-answered locally from the stale database entry, so the frame reaches the host on its new leaf. The host replies, the new leaf learns the endpoint, and the move is signalled through COOP with a newer sequence number so the old leaf withdraws its entry. Without ARP flooding the request never leaves the old leaf's local proxy reply, and the move stays invisible until the silent host itself starts sending traffic. That is precisely why option C is the correct detection method.

Why the Other Options Are Wrong

Option A is a truism rather than a mechanism — the fabric does not spontaneously detect anything; it needs a configured feature such as ARP flooding to reach the moved host. Option B describes what happens after an endpoint is already learned: the leaf announces the endpoint to COOP so other leafs can update their databases, which is the result of detection, not the way a silent host is found. Option D is the most tempting distractor: a bounce entry is installed on the original leaf once a COOP update tells it the endpoint now lives elsewhere, and it forwards traffic to the new leaf, but it cannot discover a location the fabric has never learned. As Rollizo put it, "Bounce doesn't fix the silent hosts."

Community Comment Notes

mdriraa explains the benefit of ARP flooding clearly: once a silent IP moves "from one location to another without notifying an ACI leaf," the flooded ARP request reaches the host at its new location and the fabric relearns it. prospio971 reaches the same conclusion, noting that detection "depends on how the bridge domain is configured" and that ARP flooding is the enabler. udo2020 voted for D and cited Cisco's endpoint-learning white paper, but that document describes bounce entries in the context of a move already detected via COOP, which supports C rather than refuting it — the 83-to-17 vote split reflects the same reading."

Official Reference

Exam Strategy

On 300-620, separate detection from reaction: ask yourself which option generates traffic that can reach an unknown location, and which option only reacts after the location is known. ARP flooding generates the traffic; COOP announces and bounce entries are reactions, so they can be eliminated quickly.

Frequently Asked Questions

Why isn't a bounce entry the right answer for a moved silent host?

A bounce entry is installed on the old leaf only after the move is detected via COOP, so it redirects traffic to the new location instead of discovering where a silent host went.

What happens if ARP flooding is disabled in the bridge domain?

The leaf proxy-replies from its stale endpoint entry, the ARP request never reaches the moved host, and the new location stays undetected until the silent host sends traffic.

Related Analysis

← Back to 300-620 Study Guide