Cisco ACI with Palo Alto

[24]

Hi Team,

I am integrating PA Firewall which is configured in vwire mode/L1 mode. I have to do this configuration without service graph. My approach is below :-

EPG1(Vlan 10/10.10.10.10)———-BD1(No unicast routing)—————FW————BD2(Gateway-10.10.10.1/VLAN20) 

My question is :- Is this a supported approach ? 

[BANERJEE SHIBASISH]

Hi @24,

Thanks for your question !!

Please refer the below link for deployment guide of Transparent Firewall with Cisco ACI. 

https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739571.html#Option1Transparentfirewall

Alternatively, you can also check Integration guide about different ways Palo Alto Firewall can be integrated with Cisco ACI with Preparation details.

https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-a-firewall-in-cisco-aci/prepare-your-aci-environment-for-integration

-----------------------------------------
If you find my reply solved your question or issue, kindly click the 'Accept as Solution' button and vote it as helpful.

You can also learn more about Cisco ACI through our live Ask the Experts (ATXs) session. Check out the ATXs Resources [https://community.cisco.com/t5/data-center-and-cloud-knowledge/cisco-aci-ask-the-experts-resources/ta-p/4394491] to view the latest schedule for upcoming sessions, as well as the useful references, e.g. online guides, FAQs.

Regards,

Shibasish