Cisco ACI Multipod Service graph PBR (East-West Segmentation)

[yaseenhasan]

Hello @Robert Burns / All

I'm implementing service graph in PBR mode in a multipod, each pod has an active/standby pair of Firewalls. The fabric consists of one tenant/ one vrf and several bridge domains / EPGs (Network centric) that are spread across both pods. The end goal is to segment traffic between EPGs. I am leaning towards applying contract on the VZ-Any level and the contract references a service graph. 

My question here is - When Devices are configured under L4-L7Services, would I configure a device for each pod or just configure one device and include firewalls from both pods under one device?

Regards

YH

[Ibrahim Jamil]

Hi Mr Robert Burns , Hi All

Greeting

I m doing almost the same project but for North-south traffic ,  FTD Cluster will be stretched across PODs + LB F5 , i m struggling finding DOCs mentioned such setup

can u pls give us Gotchas to go further

thanks

Ibrahim

ME Region / Dead Sea

[AshSe]

Hi @yaseenhasan , below is my understanding based on details shared by you. Please check and validate/correct:

MoD Physical Connectivity:

Logical Connectivity:

I am sorry to say that I am not able to understand your question. Could you please elaborate your question.