ACI Service Insertion Logic Check!

[JonathanC1]

Hello Team,

Whilst reading up on Service Insertion I am confused as what Service Insertion is in non-managed mode with no PBR. I can understand the strengths/benefits of PBR and managed mode service insertion (no PBR.)

Can anyone help enlighten me - From my understanding, you have to make the firewall the default gateway with non-managed mode (no PBR) so you also lose visibility [disable uni-cast routing and enable flooding.]

Warm Regards

JC

[archiban]

Hi @JonathanC1,

For PBR, ACI needs to be the gateway of the servers.

However, with non-managed mode (no PBR), you can have the gateway on the firewall. For this case, you rightly mentioned that :- unicast routing needs to be disabled and flooding should be enabled.

I hope this was useful. Feel free to reach out incase of anything. Have a great day!!

Best Regards

Archisman