How to force BD to specific l3out

[Cyrielrct]

Hi Guys,

I'm trying to figure out how to redirect specific BD to a specific l3out.

Let's try to be more clear through an exemple :

I have 2 L3out :

- L3out_core (where the default route is currently pointing to) 

- L3out_firewall

All traffic is now routed to the core to be routed outside. I'm adding a new l3out pointing to a firewall and I want to force for testing purpose only one BD to use the firewall as default route.

How this can be done ? 

Thank you for your help.

[Marcel Zehnder]

Hi 

This won't be possible unless you move the BD and FW-L3out to an other VRF. If possible try to do your testing the other way around: route a specific destination (some kind of external test-network) via the FW-L3out, all your BDs/EPGs will use the FW as a next-hop if you point a more specific route to the FW.

It's also possible to achieve this using policy based redirect: you need to attach the FW via a service BD (not via a l3out), you can then attach a contract with a service graph between your test BD/EPG and your core-l3out external EPG and redirect the corresponding traffic to the FW.