topic Re: Static route on Cisco SDA Border switch in Software-Defined Access (SD-Access)

Static route on Cisco SDA Border switch

Kaneki007 — Mon, 29 May 2023 19:46:37 GMT

Hello all,

I'm new to Cisco SD-ACCESS technology, and i have to migrate two 2 and 2 firewalls to the SDA Fabric on the border switch, the two routers are connected to the traditionnal campus with BGP, but the 2 firewalls have only static routes, i'm wondering how should i connect them to the fabric? For the two routers i understand i can use L3handoff but for the firewalls how can i add static routes on the border to reach specific subnets behind these firewalls ?

Re: Static route on Cisco SDA Border switch

Flavio Miranda — Mon, 29 May 2023 20:08:58 GMT

It shouldn´t be a problem either with green field or brown field SDA. You can take a look here

https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/tech_notes/b_dnac_sda_lan_automation_deployment.html#id_92010

Re: Static route on Cisco SDA Border switch

Kaneki007 — Mon, 29 May 2023 20:22:39 GMT

On this article they show how to add static route on the DNA itself, but in my case The 2 firewalls will be connected to the border switch, so i want to create a simple L3 routed link and add static routes for specific subnets on the border switch

Re: Static route on Cisco SDA Border switch

Flavio Miranda — Mon, 29 May 2023 21:27:25 GMT

I added the wrong link, sorry. Let me find here and I will share.

Re: Static route on Cisco SDA Border switch

Kaneki007 — Mon, 29 May 2023 21:37:48 GMT

Okay thank you i appreciate it

Re: Static route on Cisco SDA Border switch

Flavio Miranda — Mon, 29 May 2023 22:57:14 GMT

Here it. It is a vídeo actually. But the scenario seems to be similar to yours

https://m.youtube.com/watch?v=KPSWLnNvBpQ&feature=youtu.be#bottom-sheet

Re: Static route on Cisco SDA Border switch

jalejand — Wed, 31 May 2023 17:40:02 GMT

If the firewall cannot support BGP, still configure the L3 handoffs/IP Transit in the Borders, this will configure both BGP and SVI configuration; use it to create the L3 interfaces between the Border and Firewall.

With these created, you can just use static routes in the Firewall to point to the interfaces created by the L3 Handoff/IP Transit feature.

Of course, using BGP will give you the advantage of importing specific prefixes into LISP and do dynamic routing, but static can do the job too.

Re: Static route on Cisco SDA Border switch

Kaneki007 — Wed, 31 May 2023 21:16:01 GMT

How can i add static routes on the border from the DNAC please?

Re: Static route on Cisco SDA Border switch

Andrii Oliinyk — Thu, 01 Jun 2023 05:23:12 GMT

u must use network templates for this.