Bridge domains are a bit confusing in Cisco ACI, as they don't seem to have a direct analog to traditional networking. But it actually does: Primary VLAN. EPGs are secondary VLANs. Why not call it a VLAN? Because we also have other encapsulations now (VXLAN).