topic Configuring L3Out static routing on Border Leaf via NDFC in Nexus Dashboard

Configuring L3Out static routing on Border Leaf via NDFC

Mario Rosi — Tue, 25 Feb 2025 18:12:51 GMT

Hi,

i need to reproduce in VXLAN fabric using NDFC a scenario like the one in the picture because of migration from a common legacy scenario where i've a couple of N7K as core switches that are collecting in vPC many port-channels from N5Ks at access.

I have this scenario where HSRP is configured between N7Ks and a couple of FWs is implementing static routing with them using as next hop the VIP of HSRP; viceversa, the two N7Ks are using as netx hop one FW ip address or the one of the second FW depending on the destination prefix the stati route is pointing (see legacy.png).

In VXLAN i was thinking to reproduce the same scenario (see scenario.png) defining the same bridge domain with an IP anycast GW configured and shared between the couple of border leaf that are connected to the two FWs.

The problem now is that i don't know how to implement static routing with NDFC; with eBGP it would be quite easy, but with stati routing i don't find the knobs where to manouvre to implement static routing.

May you help me showing where to go on NDFC GUI to do that?

Thanks

Mario

Re: Configuring L3Out static routing on Border Leaf via NDFC

zulzig — Tue, 25 Feb 2025 19:23:16 GMT

Dear Mario,

In the Policies section for your fabric, you need to assign it to a device using a policy template.
best regards

Re: Configuring L3Out static routing on Border Leaf via NDFC

Mario Rosi — Wed, 26 Feb 2025 09:07:44 GMT

Thanks for your suggestion, but:

1) the static route should be configured in a vrf

2) the static routes hould be then redistributed via BGP EVPN as type 5

Which are the right policies to do that?

...and however, is there a document that describe all the policies available?

Thanks again

Mario

Re: Configuring L3Out static routing on Border Leaf via NDFC

zulzig — Thu, 27 Feb 2025 10:17:09 GMT

Dear Mario,

I’ll take a look, but I’m confident you’ll find the templates for it. Alternatively, you can use the switch_freeform template.

Re: Configuring L3Out static routing on Border Leaf via NDFC

voliveira — Tue, 24 Jun 2025 12:55:44 GMT

Hi Guys,

I'm facing the same issue... @Mario Rosi Did you fix it? The only way should be via switch_freeform template?

Thanks