Hey folks,
I'm looking to set up an L3out with static routes for an Active/Standby Firewalls pair, as shown in the diagram below. However, I'm feeling a bit confused, especially when it comes to configuring the L3out with SVI. Any advice on how to proceed would be greatly appreciated.
this post
https://community.cisco.com/t5/application-centric-infrastructure/aci-l3out-using-svi/td-p/4172036
and rednectar's blog
https://unofficialaciguide.com/2017/08/03/l3out-connecting-to-activestandby-fw/
(prt screens seem to be from older version so not 1:1 witht he newer but the concept is the same jsut the matter of finding where it was placed in gui now)
are helpful
instead of nodes you configure vPC and choose your vpc in the l3out config (path)
then the IPs as rednectar wrote
For my test setup I was using also trunk interface (as opossed to access in the blog) as I had a shared interface
For that, if it is also your case, check the best practice for aaep as well
https://community.cisco.com/t5/application-centric-infrastructure/aaep-for-shared-interfaces-design-best-practice/td-p/3920017
