ACI Service Graph Insertion

[nupagazi]

Hello All,

What is the difference between L4-L7 service insertions using standard way and policy based redirect ? By standard way I mean applying the service graph template to contract:

 And the other wau by using PBR:

[Hefe2]

Hi,

there is no "other way".  Under  "L4-L7 Policy-Based-Redirect" you create the PBR Device which is reused when the Service Graph is deployed.

Regards

[nupagazi · Accepted solution]

Hi Hefe2,

I have found the infrmation I need from following link: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739971.html For PBR you don't need shadow EPG or connector has to be in either comsumer BD or provider BD

Regards,

An

[Hefe2]

Hi,
yes, there´s no need for an EPG. As you already mentioned you just need to select the corresponding BD in the Service Graph deployment wizard.

Regards

[nupagazi]

If you don't use PBR, then you would need

[Hefe2]

If you don´t to use PBR, you need an EPG to connect an external Device as L3 GW for firewalling,etc

Feel free to contact me directly if you have any ACI relevant questions/topics to discuss

Regards