Internet Routers Connected to ACI Fabric

[Ibrahim Jamil]

Hi Guys

Couple of Questions Pls

1. Do i need normal Physical domain OR routed Domain to connected Internet routers to ACI Fabric ? not plan here L3OUT

2. do i need to  connect these routers as vPC or individual ports from each INET Router to each  ACI Leaf ?

Thanks

[RedNectar]

HI @Ibrahim Jamil ,

---

1. Do i need normal Physical domain OR routed Domain to connected Internet routers to ACI Fabric ? not plan here L3OUT

You need a L3 Domain

2. do i need to  connect these routers as vPC or individual ports from each INET Router to each  ACI Leaf ?

---

Entirely your choice.  For dual attachments, you can use a VPC, which means you rely on LACP for failover if one link fails.  Alternatively, you can use individual ports and rely on OSPF/EIGRP/BGP to do the failover if one link fails.

If you use a VPC, ACI must be configured with two IP addresses (one on each leaf) anyway.

[Ibrahim Jamil]

Hi Chris

Thanks for ur help as always

bro , what about the HSRP VIP (Public IP) to send static route to from ASA

thanks

[RedNectar]

Hi @Ibrahim Jamil ,

Are you asking how to configure a static route on a L3Out? (to the HSRP VIP?)

That can be done in the Node Profile of each Leaf switch in the L3Out.

This doc shows how to do that - https://unofficialaciguide.com/2017/08/03/l3out-connecting-to-activestandby-fw/

[Ibrahim Jamil]

thanks bro Chris