Cisco ACI Policy-Based Redirect

[Va.8427]

Hi there.

I have question about PBR in Cisco ACI.

Can anyone explain what does this sentence mean?

"Starting with ACI release 4.1, you can deploy a L4-L7 device operating in Layer 1 / Layer 2 mode with Service Graph PBR also"

Layer 1 operating mode? I don't understand. 

[Marcel Zehnder · Accepted solution]

Hi Vahid

Have a look at the L1/L2 section in the PBR white paper:

https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739971.html#L1L2PBR

HTH

Marcel

[6askorobogatov]

You can create and add to the contract subject L4-L7 device (FW / IPS/ IDS etc) that operates in L1 (bump on a wire) or L2 (transparent) and send both forward and return traffic via this device by using PBR on both sides.  L1/L2 device cannot be a single arm and "in" and "out" should be connected to different leafs. 

HTH.